CVE-2025-26491

CVE-2025-26491 is a duplicate of CVE-2025-26494 (per the initial description). Connected documents provide concrete details for CVE-2025-26494: a Server-Side Request Forgery (SSRF) vulnerability that allows authentication bypass in Tableau Server, affecting versions 2023.3 through 2023.3.5. The s...

CVE-2025-26490

CVE-2025-26490 is a duplicate of CVE-2025-26495. The connected records describe a vulnerability in Salesforce Tableau Server involving cleartext storage of Personal Access Tokens (PAT) in logging repositories. Affected products/versions: Tableau Server before 2022.1.3, and before 2021.4.8, 2021.3...