Skip to content
OpenAdvisories
High · 8.2 CVE-2026-9057 EUVD-2026-31061GHSA-vg5m-3g3f-898p

Security fix for Qlik Talend Administration Center URL access control vulnerability

Published May 20, 2026 · Updated May 20, 2026 · Assigned by Bugcrowd

Description

A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.

Affected products

VendorProductAffectedFixed
Talend Talend Administration Center 8.0 – < Patch_20251121_QTAC-1471_R2025-11_v1-8.0.1 Patch_20251121_QTAC-1471_R2025-11_v1-8.0.1

References