What is the CVSS score of CVE-2026-6264?

CVE-2026-6264 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Talend Jobserver are affected by CVE-2026-6264?

Talend JobServer and Talend Runtime contain a critical unauthenticated remote code execution vulnerability (CVE-2026-6264, CVSS 9.8) affecting JMX monitoring ports, allowing attackers to execute…. A patch is available.

How to fix or mitigate CVE-2026-6264?

Within 24 hours: Identify all Talend JobServer and Runtime instances and verify network exposure (scan for JMX ports, typically 7199/tcp). Within 7 days: Apply vendor-released patch Talend ESB Runtime R2024-07-RT to all affected systems, prioritizing internet-facing and externally-accessible instances. Implement network segmentation to restrict JMX port access to trusted administrative networks only. Within 30 days: Validate patch deployment across all systems, conduct post-patch vulnerability rescans, and document JMX port access controls in your network baseline.

Talend Jobserver CVE-2026-6264

EUVD-2026-22203 CRITICAL

2026-04-14 Bugcrowd

RCE Talend Jobserver Talend Runtime

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 15:37 vuln.today

cvss_changed

Patch released

Apr 17, 2026 - 15:26 nvd

Patch available

Analysis Updated

Apr 16, 2026 - 05:44 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

8.0.1.R2026-01-RT,7.3.1-R2026-01

Analysis Generated

Apr 14, 2026 - 02:54 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 02:45 euvd

EUVD-2026-22203

Analysis Generated

Apr 14, 2026 - 02:45 vuln.today

CVE Published

Apr 14, 2026 - 01:49 nvd

CRITICAL 9.8

DescriptionCVE.org

A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port. The attack vector is the JMX monitoring port of the Talend JobServer. The vulnerability can be mitigated for the Talend JobServer by requiring TLS client authentication for the monitoring port; however, the patch must be applied for full mitigation. For Talend ESB Runtime, the vulnerability can be mitigated by disabling the JobServer JMX monitoring port, which is disabled by default from the R2024-07-RT patch.

AnalysisAI

Unauthenticated remote code execution via JMX monitoring port affects Talend JobServer and Talend Runtime (CVSS 9.8). Attackers can exploit the exposed JMX interface without authentication to execute arbitrary code with JobServer privileges. Vendor-released patches available (Talend ESB Runtime R2024-07-RT). No confirmed active exploitation (CISA KEV status: NO), but the trivial attack complexity (AC:L) and network accessibility (AV:N) present significant risk for exposed instances. EPSS data not provided.

Technical ContextAI

Java Management Extensions (JMX) is a Java technology providing tools for managing and monitoring applications, system objects, and service-oriented networks. JMX monitoring ports expose MBeans (Managed Beans) that allow remote management operations. When improperly secured, unauthenticated JMX ports become high-value attack surfaces because they can invoke arbitrary methods on managed objects. Talend JobServer and Talend Runtime both expose JMX monitoring interfaces for operational visibility. The vulnerability affects the JMX monitoring port implementation in both products, where default configurations permitted unauthenticated remote connections. Without TLS client authentication or proper access controls, attackers can connect to the JMX port and leverage exposed MBeans to load malicious classes, invoke system commands, or manipulate runtime configurations-achieving complete code execution within the Java runtime environment.

RemediationAI

Apply vendor-released patches immediately. For Talend ESB Runtime, upgrade to version R2024-07-RT or later, which disables the JobServer JMX monitoring port by default and includes full mitigation. For Talend JobServer, apply the corresponding security patch provided by Qlik. As an interim mitigation measure (not a substitute for patching), configure TLS client authentication for the JMX monitoring port to restrict access to trusted certificates, though the vendor advisory states that patching remains necessary for complete mitigation. Network-level controls such as firewall rules restricting JMX port access to trusted management networks should be implemented immediately if patching cannot be completed within emergency change windows. Verify that JMX monitoring ports (commonly TCP 8999 or custom-configured ports) are not exposed to untrusted networks or the internet. Full remediation guidance and patch downloads available at the official Qlik Talend security advisory: https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fix-for-the-Qlik-Talend-JobServer-and-Talend/tac-p/2541974.