Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-9056 EUVD-2026-31060GHSA-j786-w88h-3h53

Security fix for Qlik Talend Administration Center cross-site scripting vulnerability

Published May 20, 2026 · Updated May 20, 2026 · Assigned by Bugcrowd

Description

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

Affected products

VendorProductAffectedFixed
Talend Talend Administration Center 8.0 – < Patch_20260123_QTAC-1883 (cumulative patch)_R2026-01_v1-8.0.1 Patch_20260123_QTAC-1883 (cumulative patch)_R2026-01_v1-8.0.1

References