High · 7.7 CVE-2026-81536 EUVD-2026-85708GHSA-w7g4-247x-prx9

DataStage on Cloud Pak for Data has several vulnerabilities

Published Sep 23, 2026 · Updated Sep 24, 2026 · Assigned by ibm

Vendor: IBM Product: DataStage on Cloud Pak for Data

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

Affected products

Vendor	Product	Affected	Fixed
IBM	DataStage on Cloud Pak for Data	5.4.0.0	—

References

https://www.ibm.com/support/pages/node/7288649 vendor-advisory patch