First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-87085

MediumCVSS 6.3/10Last modified Nov 4, 2026

Description

Tanium addressed a SQL injection vulnerability in Provision.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Tanium	Provision	>= 1.17, < 1.17.150; >= 1.23, < 1.23.161; >= 1.24, < 1.24.199

References

https://security.tanium.com/TAN-2026-023

Timeline

Published: Oct 27, 2026
Last modified: Nov 4, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-870867.5Tanium addressed a denial of service vulnerability in Provision.CVE-2026-870887.0Tanium addressed an unauthorized code execution vulnerability in Enforce.CVE-2026-87099.9An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.CVE-2026-870908.3Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attack CVE-2026-870917.2The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versi CVE-2026-870938.8Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before CVE-2026-870959.1Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber I CVE-2026-870963.3Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber I CVE-2026-870975.3Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 CVE-2026-870983.1Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Window CVE-2026-870995.7Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Li CVE-2026-871003.6Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protec

CVE-2026-87085: Medium severity, CVSS 6.3 | Vulnix