CVE-2026-9056
Medium · 5.4CVSS
5.4
EPSS
0.2%
Published
May 20, 2026
CISA due date
—
The record
A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|