CVE-2026-87024

HighCVSS 7.2/10Last modified Sep 18, 2026

Description

Tanium addressed a SQL injection vulnerability in Asset.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 16, 2026
Last modified
Sep 18, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-870255.4Tanium addressed an improper access controls vulnerability in Comply.CVE-2026-870263.8Tanium addressed an improper access controls vulnerability in Threat Response.CVE-2026-870286.5Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board iCVE-2026-870297.5undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwardCVE-2026-87036.4The Endless Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and incCVE-2026-870308.5Tanium addressed a path traversal vulnerability in Comply.CVE-2026-870312.7n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, the add() method of concrete/src/Api/ContrCVE-2026-870324.3Tanium addressed an information disclosure vulnerability in Tanium Server.CVE-2026-870335.4Tanium addressed an improper access controls vulnerability in Comply.CVE-2026-870348.3Tanium addressed a SQL injection vulnerability in Comply.CVE-2026-870354.3Tanium addressed an information disclosure vulnerability in Comply.CVE-2026-870368.1Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87024: High severity, CVSS 7.2 | Vulnix