CVE-2026-9057

HighCVSS 8.2

Published: 20/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A broken access control issue in Talend Administration Center allows a user with 'View' permission to modify the Talend Studio update URL. This issue has been resolved in an available patch.

Risk Assessment

A low-privileged user could alter the update source, potentially leading to injection of malicious code into the development environment.

Recommendation

Apply the available patch for Talend Administration Center immediately.

Other vulnerabilities in Talend Administration Center

CVE-2026-9056Medium
A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

Original NVD description (English source)

A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.