Authentication Bypass Vulnerability in TIBCO Platform by TIBCO
CVE-2026-125285

8.8HIGH

Key Information:

Vendor

Tibco
Status
Tibco Platform’s Self-hosted Control Plane
Vendor
CVE Published:
12 November 2026

What is CVE-2026-125285?

An authentication bypass vulnerability has been identified in TIBCO’s Self-Hosted Control Plane. This flaw allows attackers to exploit alternate paths or channels to gain unauthorized access, potentially compromising system integrity and confidentiality. This issue affects versions 1.0 through 1.21 of the TIBCO Platform. For organizations using this platform, it is critical to implement recommended security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

TIBCO Platform’s Self-Hosted Control Plane 1 <= 1.21

References

https://community.tibco.com/advisories/tibco-security-adv...

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.