CVE-2026-9057

High · 8.2

CVSS

8.2

EPSS

0.3%

Published

May 20, 2026

CISA due date

—

The record

A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.

Affected packages

Ecosystem	Package	Introduced	Fixed