Cpe:2.3:a:tibco:platform_s_self_hosted_control_plane:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3atibcoplatform_s_self_hosted_control_plane/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 16:46:36 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTIBCO Platform: Authentication Bypass in Self-Hosted Control Plane (CVE-2026-125285)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-125285/Thu, 12 Nov 2026 16:46:36 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-125285/TIBCO Platform's Self-Hosted Control Plane is vulnerable to an authentication bypass via an alternate path or channel, with publicly available exploit code.CVE-2026-125285 is an authentication bypass vulnerability in the TIBCO Platform's Self-Hosted Control Plane, caused by an alternate path or channel issue. A proof-of-concept exploit for this vulnerability is publicly available.

Impact

Successful exploitation allows an unauthenticated user to bypass authentication mechanisms in the TIBCO Platform's Self-Hosted Control Plane.

Recommendation

Consult the official TIBCO security advisory for guidance on addressing this vulnerability.

]]>highadvisory