Vulnerability Database

299,690

Total vulnerabilities in the database

CVE-2025-26496

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code Inclusion.This issue affects Tableau Server, Tableau Desktop: before 2025.1.3, before 2024.2.12, before 2023.3.19.

  • Published: Aug 22, 2025
  • Updated: Nov 5, 2025
  • CVE: CVE-2025-26496
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.3
  • AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
tableau / tableau_server - 2023.3.19
tableau / tableau_server 2024.2 2024.2.12
tableau / tableau_server 2025.1 2025.1.3