CVE-2026-9057

A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.

Score

CVSS 3.1 8.2 High

Status

Deferred - 4ac701fe-44e9-4bcd-9585-dd6449257611

Published

2026-05-20

Last modified

2026-05-20

Affected products

• Administration Center (Talend)

References

• https://community.qlik.com/t5/Official-Support-Articles/Security-fix-for-Qlik-Talend-Administration-Center-URL-access/t…