Skip to content
OpenAdvisories
High · 8.8 CVE-2026-16469 EUVD-2026-84974GHSA-hw6p-gf8v-8qx8

DataStage on Cloud Pak for Data has several vulnerabilities

Published Sep 22, 2026 · Updated Sep 23, 2026 · Assigned by ibm

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References