{"id":"CVE-2026-9057","aliases":["EUVD-2026-31061","GHSA-vg5m-3g3f-898p"],"status":"published","title":"Security fix for Qlik Talend Administration Center URL access control vulnerability","description":"A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00261,"percentile":0.17883,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-05-20T04:39:38Z","modified":"2026-07-23T20:10:00Z","products":[{"vendor":"talend","product":"talend administration center"}],"references":[{"url":"https://community.qlik.com/t5/Official-Support-Articles/Security-fix-for-Qlik-Talend-Administration-Center-URL-access/ta-p/2548524"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9057"},{"url":"https://github.com/advisories/GHSA-vg5m-3g3f-898p"}],"sources":{"cve":[{"id":"CVE-2026-9057","title":"Security fix for Qlik Talend Administration Center URL access control vulnerability","description":"A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.","status":"published","published":"2026-05-20T04:39:38.619Z","modified":"2026-05-20T13:08:08.157Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T13:42:37.965383Z"}],"euvd":[{"id":"EUVD-2026-31061","description":"A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.","status":"published","published":"2026-05-20T04:39:38Z","modified":"2026-05-20T13:08:08Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T18:21:14.831553Z"}],"ghsa":[{"id":"GHSA-vg5m-3g3f-898p","title":"A broken access control issue has been identified in the Talend Administration Center, that...","description":"A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.","status":"published","published":"2026-05-20T06:31:54Z","modified":"2026-05-20T06:31:55Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:08:13.172248Z"}],"nvd":[{"id":"CVE-2026-9057","description":"A broken access control issue has been identified in the Talend Administration Center, that allows a user with “View” permission to modify the Talend Studio update URL. This issue was resolved in a patch, which is already available.","status":"published","published":"2026-05-20T05:16:23.467Z","modified":"2026-07-23T20:10:00.13Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:12:19.752984Z"}]}}