CVE-2026-8590
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Spotfire OAuth2 PKCE Bypass for public clients
Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfire Spotfire on Kubernetes (Spotfire Server modules). This issue affects Spotfire Enterprise: through 14.0.12, through 14.4.2, through 14.5.0, through 14.6.1, through 14.6.2, through 14.7.0, through 14.8.0; Spotfire Enterprise with External Consumers: through 14.0.12, through 14.5.0, through 14.6.0, through 14.6.1, through 14.6.2, through 14.7.0, through 14.8.0; Spotfire on Kubernetes: through 4.2.0, 5.0.X, 6.0.X.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Spotfire Enterprise
- Vendor
- Spotfire
- Product
- Spotfire Enterprise
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | patch | Unavailable | 14.0.12 | None listed |
| 0 | affected | patch | Unavailable | 14.4.2 | None listed |
| 0 | affected | patch | Unavailable | 14.5.0 | None listed |
| 0 | affected | patch | Unavailable | 14.6.1 | None listed |
| 0 | affected | patch | Unavailable | 14.6.2 | None listed |
| 0 | affected | patch | Unavailable | 14.7.0 | None listed |
| 0 | affected | patch | Unavailable | 14.8.0 | None listed |
Spotfire Enterprise with External Consumers
- Vendor
- Spotfire
- Product
- Spotfire Enterprise with External Consumers
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | patch | Unavailable | 14.0.12 | None listed |
| 0 | affected | patch | Unavailable | 14.5.0 | None listed |
| 0 | affected | patch | Unavailable | 14.6.0 | None listed |
| 0 | affected | patch | Unavailable | 14.6.1 | None listed |
| 0 | affected | patch | Unavailable | 14.6.2 | None listed |
| 0 | affected | patch | Unavailable | 14.7.0 | None listed |
| 0 | affected | patch | Unavailable | 14.8.0 | None listed |
Spotfire on Kubernetes
- Vendor
- Spotfire
- Product
- Spotfire on Kubernetes
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | patch | Unavailable | 4.2.0 | None listed |
| 5.0.x | affected | patch | Unavailable | Unavailable | None listed |
| 6.0.x | affected | patch | Unavailable | Unavailable | None listed |