Skip to main content

Comply CVE-2025-15340

MEDIUM
Incorrect Default Permissions (CWE-276)
2026-02-05 3938794e-25f5-4123-a1ba-5cbd7f104512
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
CVE Published
Feb 05, 2026 - 19:15 nvd
MEDIUM 6.5

DescriptionCVE.org

Tanium addressed an incorrect default permissions vulnerability in Comply.

AnalysisAI

Tanium addressed an incorrect default permissions vulnerability in Comply. [CVSS 6.5 MEDIUM]

Technical ContextAI

Classified as CWE-276 (Incorrect Default Permissions). Affects Comply. Tanium addressed an incorrect default permissions vulnerability in Comply.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Comply

View all
CVE-2026-87023 HIGH
8.5 Sep 09

Path traversal in Tanium Comply allows authenticated low-privileged network users to read files outside the module's int

CVE-2026-87030 HIGH
8.5 Sep 09

Path traversal in Tanium Comply exposes all authenticated low-privilege users to a scope-changing arbitrary file write a

CVE-2026-87034 HIGH
8.3 Sep 09

SQL injection in Tanium Comply (CWE-89) allows a network-accessible, unauthenticated attacker - contingent on user inter

CVE-2026-87036 HIGH
8.1 Sep 09

Improper access controls (CWE-862, Missing Authorization) in Tanium Comply allow an authenticated low-privileged user to

CVE-2026-87075 HIGH
8.1 Sep 09

Improper access controls in Tanium Comply allow an authenticated low-privilege user to perform unauthorized operations w

CVE-2026-87021 HIGH
7.2 Sep 09

Server-side template injection (SSTI) in Tanium Comply enables remote code execution by a highly privileged authenticate

CVE-2026-87072 HIGH
7.1 Sep 09

Improper access controls (CWE-862 Missing Authorization) in Tanium Comply expose compliance and vulnerability assessment

CVE-2026-87073 MEDIUM
6.5 Sep 09

Improper access controls in Tanium Comply allow an authenticated low-privileged network user to perform write operations

CVE-2026-87047 MEDIUM
6.3 Sep 09

Improper access controls in Tanium Comply allow authenticated low-privileged users to bypass object-level authorization

CVE-2026-87048 MEDIUM
5.4 Sep 09

Improper access controls in Tanium Comply (CWE-862, Missing Authorization) allow authenticated low-privileged users to p

CVE-2026-87033 MEDIUM
5.4 Sep 09

Improper access controls in Tanium Comply allow authenticated low-privileged users to perform unauthorized actions affec

CVE-2026-87025 MEDIUM
5.4 Sep 09

Tanium Comply contains an improper access control vulnerability (CWE-639, Authorization Bypass Through User-Controlled K

Share

CVE-2025-15340 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy