Is CVE-2025-26496 actively exploited?

No active exploitation of CVE-2025-26496 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-26496 be exploited remotely?

No. CVE-2025-26496 requires local access to exploit.

What is the CVSS score of CVE-2025-26496?

CVE-2025-26496 has a CVSS score of 9.3 (CRITICAL).

HOME VULNERABILITIESCVE-2025-26496

CRITICAL

CVE-2025-26496

CWE-843Published: August 22, 2025· Updated: Jun 17, 2026

9.3

CVSS v3.1

Official Description

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code Inclusion.This issue affects Tableau Server, Tableau Desktop: before 2025.1.3, before 2024.2.12, before 2023.3.19.

NVD Source

Risk Analysis

Tableau Server and Desktop are affected by a type confusion vulnerability in their file upload modules, which can lead to local code inclusion. This critical flaw allows for significant system compromise and carries a high CVSS score of 9.3.

No public exploit is known for this vulnerability, and it is not included in the KEV catalog.

Recommended Action

Upgrade Tableau Server and Desktop to the versions specified as fixed (2025.1.3, 2024.2.12, or 2023.3.19) to remediate the vulnerability.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2025-26496 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.3.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.