All vulnerabilities
CVE-2026-108302

Tanium addressed an improper access controls vulnerability in Comply.

Tanium Comply
Open in ThreatlineRecord JSON
CVSS
4.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in2.32.263Also 2.35.323, 2.37.326CVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Affected versions 3

  • Complyaffected: 2.32 before 2.32.263CVE List
  • Complyaffected: 2.35 before 2.35.323CVE List
  • Complyaffected: 2.37 before 2.37.326CVE List

References 1