CVE-2026-125285

CVSS 8.8 (high) · published 2026-11-12

Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control Plane. This issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21.

Weakness: CWE-288

Source: NVD CVE-2026-125285

References

• https://community.tibco.com/advisories/tibco-security-advisory-november-12-2026-tibco-platform-cve-2026-125285-r232/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.