PT-2026-32590 · Talend · Talend Jobserver+1

Published 2026-04-14 · Updated 2026-04-15 · CVE-2026-6264

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Talend JobServer (affected versions not specified) Talend Runtime versions prior to R2024-07-RT

Description Unauthenticated remote code execution is possible via the JMX monitoring port.

Recommendations Require TLS client authentication for the monitoring port or apply the patch for Talend JobServer. Disable the JobServer JMX monitoring port for Talend Runtime.

Fix

Related Identifiers

CVE-2026-6264

Affected Products

Talend Jobserver

Talend Runtime

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-6264 · Security Note
• https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fix-for-the-Qlik-Talend-JobServer-and-Talend/tac-p/2541974 · Note
• https://twitter.com/CVEnew/status/2043976141648634001 · Twitter Post
• https://twitter.com/CCBalert/status/2044088093939015934 · Twitter Post
• https://twitter.com/CveFindCom/status/2043890085959979221 · Twitter Post
• https://twitter.com/CVEarity/status/2044297553190260792 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2043959990256390463 · Twitter Post
• https://twitter.com/0dayPublishing/status/2043885614269911518 · Twitter Post