Vulnerability · Published May 20, 2026 · Assigned by Bugcrowd
CVE-2026-9057Security fix for Qlik Talend Administration Center URL access control vulnerability
High 8.2
In plain English
A high-severity security flaw in Talend Administration Center from Talend. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.3%top 82.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Talend | Talend Administration Center | 8.0 – before Patch_20251121_QTAC-1471_R2025-11_v1-8.0.1 |