CVE-2025-26496: Critical severity Salesforce Tableau Server vulnerability
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code Inclusion.This issue affects Tableau Server, Tableau Desktop: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26496?
CVE-2025-26496 is classified as a high-severity vulnerability due to its potential for local code inclusion.
How do I fix CVE-2025-26496?
To remediate CVE-2025-26496, ensure you update Salesforce Tableau Server and Tableau Desktop to versions 2025.1.3 or later.
What systems are affected by CVE-2025-26496?
CVE-2025-26496 affects Salesforce Tableau Server and Tableau Desktop on both Windows and Linux platforms.
What is the impact of exploiting CVE-2025-26496?
Exploiting CVE-2025-26496 can lead to unauthorized access and execution of local code, compromising system integrity.
When was CVE-2025-26496 disclosed?
CVE-2025-26496 was disclosed as part of the ongoing security reviews for Salesforce's Tableau products.