CVE-2026-9056
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.
Risk Assessment
An attacker can inject a malicious script that executes in another user's browser, leading to session theft, data theft, or privilege escalation.
Recommendation
Update Talend Administration Center to a version that includes a fix for this vulnerability. Restrict server management permissions to trusted users only.
Original NVD description (English source)
A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.