This issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TIBCO | TIBCO Platform’s Self-Hosted Control Plane | affected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 12 Nov 2026 13:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control Plane. This issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21. | |
| Title | TIBCO Platform’s Self-Hosted Control Plane - Authentication Bypass Vulnerability | |
| Weaknesses | CWE-288 | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: tibco
Published:
Updated: 2026-11-12T12:56:27.620Z
Reserved: 2026-11-09T18:49:48.747Z
Link: CVE-2026-125285
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-12T13:17:15.003
Modified: 2026-11-12T21:30:23.870
Link: CVE-2026-125285
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-288
Authentication Bypass Using an Alternate Path or Channel