CVE-2026-9057Disclosure

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://community.qlik.com/t5/Official-Support-Articles/Security-fix-for-Qlik-Talend-Administration-Center-URL-access/ta-p/2548524

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-05-20); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-20	1	Disclosure1
2026-05-23	1	Patch1

Full discourse2 posts

Kaushik Roy@A7la100n137d
Patch
@qlik has assigned CVE-2026-9057 to the access control vulnerability I discovered in their Qlik Talend Administration Center application. - https://community.qlik.com/t5/Official-Support-Articles/Security-fix-for-Qlik-Talend-Administration-Center-URL-access/ta-p/2548524 - https://www.cve.org/CVERecord?id=CVE-2026-9057 Thanks to @Bugcrowd for the coordination.
Post summary
The post announces CVE-2026-9057 for an access control issue in Qlik Talend Administration Center and references a security‑fix article and CVE record, indicating that a patch has been released.
0000186
218 followersView on X
CVE@CVEnew141d
Disclosure
CVE-2026-9057 A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL.… https://www.cve.org/CVERecord?id=CVE-2026-9057
Post summary
A new CVE (CVE‑2026‑9057) describing a broken access control flaw in Talend Administration Center is publicly disclosed, with no PoC, exploit, patch, or active exploitation information provided.
00000148
57.5K followersView on X

Explore more

Back to dashboard