CVE-2026-125285: TIBCO Platform’s Self-Hosted Control Plane - Authentication Bypass Vulnerability
Published Nov 12, 2026
·Updated
Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control Plane.
This issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21.
Event History
Nov 12, 2026
CVE Published
via MITRE·12:56 PM
Data Sourced
via MITRE·12:56 PM
DescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
TIBCO Platform’s Self-Hosted Control Plane versions 1 through 1.21 are affected.
2
Can this be exploited remotely without credentials or user interaction?
The supplied CVSS vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.
3
What security impact could successful exploitation have?
The supplied CVSS vector indicates high impact to confidentiality and low impact to integrity. It indicates no impact to availability.