CVE-2026-108302

MediumCVSS 4.3/10Last modified Nov 4, 2026

Description

Tanium addressed an improper access controls vulnerability in Comply.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-863

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TaniumComply>= 2.32, < 2.32.263; >= 2.35, < 2.35.323; >= 2.37, < 2.37.326

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-1083038.8Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.CVE-2026-1083047.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.CVE-2026-1083057.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.CVE-2026-1083067.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.CVE-2026-1083077.8Tanium addressed a heap-based buffer overflow vulnerability in Index.CVE-2026-1083086.5Tanium addressed a SQL injection vulnerability in Patch.CVE-2026-1083095.5Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.CVE-2026-108316.9A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface doesCVE-2026-1083105.3Tanium addressed a denial of service vulnerability in Tanium Server.CVE-2026-1083112.7Tanium addressed an insufficient logging vulnerability in Tanium Server.CVE-2026-1083136.6Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.CVE-2026-1083164.3Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-108302: Medium severity, CVSS 4.3 | Vulnix