{"affected":[{"defaultStatus":"affected","product":"TIBCO Platform’s Self-Hosted Control Plane","source":"CNA: tibco","vendor":"TIBCO","versions":[{"lessThanOrEqual":"1.21","status":"affected","version":"1","versionType":"Patch"}]}],"cveId":"CVE-2026-125285","cwes":["CWE-288"],"description":"Authentication bypass using an alternate path or channel vulnerability in TIBCO TIBCO Platform’s Self-Hosted Control Plane.\n\nThis issue affects TIBCO Platform’s Self-Hosted Control Plane: from 1 through 1.21.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: tibco","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794488187620,"publishedAt":1794488187620,"references":[{"source":"CNA: tibco","tags":[],"url":"https://community.tibco.com/advisories/tibco-security-advisory-november-12-2026-tibco-platform-cve-2026-125285-r232/"}],"remediation":[],"revision":"266cb4fef84144a6a0c298c4425d35cac0b345adb28ae75d39bd8080a7d31d15","sources":[{"modifiedAt":1794488187620,"name":"CNA: tibco","retrievedAt":1794488936345,"url":"https://www.cve.org/CVERecord?id=CVE-2026-125285"}],"ssvc":null,"status":"published","title":"TIBCO Platform’s Self-Hosted Control Plane - Authentication Bypass Vulnerability","updatedAt":1794488936345}