Skip to content
OpenAdvisories
High · 8.8 CVE-2026-16673 EUVD-2026-77789GHSA-x8gr-p84p-278m

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Published Sep 14, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References