PULSEUnderground Intel

LIVE57signals / 24h

FEED

ransomthegentlemen reclama a DHC · JP · Not Foundransomthegentlemen reclama a INKA Group GmbH Co · DE · Manufacturingransomthegentlemen reclama a Vitex Pharmaceuticals · Healthcareransomthegentlemen reclama a Mdj Management · Otherransomthegentlemen reclama a Hst · US · Not Foundransomthegentlemen reclama a Groupe BPCE · VN · Financial Servicesransomthegentlemen reclama a Axson Teknik · SE · Manufacturingransomthegentlemen reclama a Ponti · PL · Otherransomthegentlemen reclama a Godollo · HU · Agriculture and Food Productionransomthegentlemen reclama a Hoang Chiropractic Center · US · Healthcareransomthegentlemen reclama a aZaaS · US · Technologyransomthegentlemen reclama a National Furniture Outlet · US · Retail & E-Commerceransomthegentlemen reclama a TESI · IT · Not Foundransomthegentlemen reclama a Intranet Gov Brasil · BR · Government & Defenseransomthegentlemen reclama a DHC · JP · Not Foundransomthegentlemen reclama a INKA Group GmbH Co · DE · Manufacturingransomthegentlemen reclama a Vitex Pharmaceuticals · Healthcareransomthegentlemen reclama a Mdj Management · Otherransomthegentlemen reclama a Hst · US · Not Foundransomthegentlemen reclama a Groupe BPCE · VN · Financial Servicesransomthegentlemen reclama a Axson Teknik · SE · Manufacturingransomthegentlemen reclama a Ponti · PL · Otherransomthegentlemen reclama a Godollo · HU · Agriculture and Food Productionransomthegentlemen reclama a Hoang Chiropractic Center · US · Healthcareransomthegentlemen reclama a aZaaS · US · Technologyransomthegentlemen reclama a National Furniture Outlet · US · Retail & E-Commerceransomthegentlemen reclama a TESI · IT · Not Foundransomthegentlemen reclama a Intranet Gov Brasil · BR · Government & Defense

CVE WatchJul 23, 2026

CVE-2026-9056

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage server

CVSS

5.4

Medium

EPSS

0.2%

p8

KEV

—

Exploit Today

2

0-100

Published: May 20, 2026 · Last modified: Jul 23, 2026

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-092026-08-05

Technical description

A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user.

Official references

community.qlik.comhttps://community.qlik.com/t5/Official-Support-Articles/Security-fix-for-Qlik-Talend-Administration-Center-cross-site/ta-p/2548522

Related CVEs

No related CVEs by CWE or product.