comply vulnerabilities and fixes

Recent CVEs affecting comply, with upgrade or downgrade steps. 16 tracked.

comply has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 16. Most recent: 2026-09-09. Highest priority: CVE-2026-87023 (score 40/100).

• CVE-2026-87075 HIGH 8.1 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87073 MEDIUM 6.5 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87072 HIGH 7.1 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87048 MEDIUM 5.4 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87033 MEDIUM 5.4 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87030 HIGH 8.5 UPGRADE Tanium addressed a path traversal vulnerability in Comply.
• CVE-2026-87025 MEDIUM 5.4 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87023 HIGH 8.5 UPGRADE Tanium addressed a path traversal vulnerability in Comply.
• CVE-2026-87021 HIGH 7.2 UPGRADE Tanium addressed an unauthorized code execution vulnerability in Comply.
• CVE-2026-87019 MEDIUM 4.3 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87047 MEDIUM 6.3 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87046 MEDIUM 4.3 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87037 MEDIUM 5.4 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87036 HIGH 8.1 UPGRADE Tanium addressed an improper access controls vulnerability in Comply.
• CVE-2026-87035 MEDIUM 4.3 UPGRADE Tanium addressed an information disclosure vulnerability in Comply.
• CVE-2026-87034 HIGH 8.3 UPGRADE Tanium addressed a SQL injection vulnerability in Comply.

FAQ

How do I fix comply vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is comply being exploited right now?

None of the tracked comply CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which comply CVE should I patch first?

CVE-2026-87023 currently ranks highest (40/100): Tanium addressed a path traversal vulnerability in Comply..

RSS feed for comply · ← Back to latest CVEs