Critical Server-Side Request Forgery Vulnerability in Tanium Enforce (CVE-2026-87084)
A server-side request forgery (SSRF) vulnerability, CVE-2026-87084, with a CVSS score of 7.7, was discovered in Tanium's Enforce product. This vulnerability allows attackers to make unauthorized requests on behalf of the server, potentially leading to confidentiality breaches. The vulnerability affects multiple versions of Enforce (2.9, 2.10, and 3.0) and has been addressed by Tanium in recent updates. Organizations are urged to apply patches immediately to mitigate potential risks.