CVE-2021-28826: TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability

Security readout for executives and security teams

This is a local privilege-escalation risk in TIBCO's Windows installer layout for its Eclipse Mosquitto Distribution Bridge. A low-privileged Windows user could place malicious software where the elevated component may run it, potentially turning a limited foothold into broad system impact. Exposure is limited to Windows systems running the affected TIBCO Bridge Community or Enterprise Edition versions 1.3.0 and below. This is not a remote network-entry vulnerability; it matters most where attackers, contractors, or malware may already have low-privileged local access. Treat this as high priority for environments using the affected TIBCO Bridge on Windows, especially shared servers or workstations. It is mainly a post-compromise escalation issue, but successful abuse could give an attacker elevated control over confidentiality, integrity, and availability. Mitigation focus: Review the TIBCO advisory for vendor-confirmed fixed versions or remediation guidance.; Inventory Windows installations of the affected TIBCO Bridge Community and Enterprise editions.; Prioritize upgrade or replacement for versions 1.3.0 and below if vendor guidance provides a fixed release..

Prepared

May 23, 2026, 08:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.