by Kastro
Paper/Archive/CVE-2026-16346

CVE-2026-16346

IBM DataStage on Cloud Pak for Data — DataStage on Cloud Pak for Data has several vulnerabilities

EPSS 0.6%CVSS 9.9
critical.is priorityof 100
40
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 50.0.500 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected

ProductAffectedFixed inSource
DataStage on Cloud Pak for Data5.4.0.0–CNA

Scores by source

ibm (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchibm.com/support/pages/node/7288649