Findings

CVE-2026-9056

A stored cross-site scripting vulnerability has been found in the Talend Administration Center.

Published May 20, 2026 · updated Jul 23, 2026

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 20, 2026 · NIST NVD

    Detected

    A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

  2. Jul 23, 2026 · NIST NVD

    Updated

    A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

Sources

  • CVE.orgVulnerability recordCVE-2026-9056

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-9056

    A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

    nvd.nist.gov

References

CVE-2026-9056 · ZeroDay Findings