← Back

CVE-2026-87084

nvd nist
Published: Sep 9, 2026Modified: Sep 16, 2026

JSON object

Loading...
7.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.1 / Impact: 4.0
Source: 3938794e-25f5-4123-a1ba-5cbd7f104512 (Secondary)

Description

Tanium addressed a server-side request forgery vulnerability in Enforce.

Affected (3)

Products: Tanium: Enforce
Tanium
1 product
Enforce
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Tanium
Enforce
2.10.0 ≤ version < 2.10.760
Enforce
2.9.0 ≤ version < 2.9.718
Enforce
3.0.0 ≤ version < 3.0.346

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512
Vendor Advisory

Timeline

No history available yet.