Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-9056

Security fix for Qlik Talend Administration Center cross-site scripting vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bugcrowd

Description

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Talend Talend Administration Center

Default version status: affected

  • 8.0 to < Patch_20260123_QTAC-1883 (cumulative patch)_R2026-01_v1-8.0.1affected

References