First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-87086

HighCVSS 7.5/10Last modified Nov 4, 2026

Description

Tanium addressed a denial of service vulnerability in Provision.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Tanium	Provision	>= 1.17, < 1.17.150; >= 1.23, < 1.23.161; >= 1.24, < 1.24.199

References

https://security.tanium.com/TAN-2026-080

Timeline

Published: Oct 27, 2026
Last modified: Nov 4, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-870887.0Tanium addressed an unauthorized code execution vulnerability in Enforce.CVE-2026-87099.9An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.CVE-2026-870908.3Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attack CVE-2026-870917.2The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versi CVE-2026-870938.8Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before CVE-2026-870959.1Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber I CVE-2026-870963.3Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber I CVE-2026-870975.3Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 CVE-2026-870983.1Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Window CVE-2026-870995.7Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Li CVE-2026-871003.6Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protec CVE-2026-871016.2Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Win

CVE-2026-87086: High severity, CVSS 7.5 | Vulnix