by Kastro
Paper/Archive/CVE-2026-81212

CVE-2026-81212

IBM DataStage on Cloud Pak for Data — DataStage on Cloud Pak for Data Improper Authorization

EPSS 0.3%CVSS 10.0
critical.is priorityof 100
34
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 18.8.188 × 203.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.

Affected

ProductAffectedFixed inSource
DataStage on Cloud Pak for Data5.4.0.0–CNA

Scores by source

ibm (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchibm.com/support/pages/node/7289603