CVE-2025-26494

HIGH 7.7CVE-2025-26494 · Published 11/02/2025 · updated 17/06/2026

In short

CVE-2025-26494 is a HIGH (CVSS 7.7) vulnerability affecting tableau server (tableau).
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tableau server tableau	`≥ 2023.3, ≤ 2023.3.5`	No fix yet

Description

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5.

References

help.salesforce.com/s/articleView · Third Party Advisory

More vulnerabilities in tableau server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tableau server

tableau

≥ 2023.3, ≤ 2023.3.5

No fix yet

More vulnerabilities in tableau server

See all →