Skip to content
OpenAdvisories
High · 8.8 CVE-2026-82096 EUVD-2026-98069GHSA-9vwx-4fc2-vrvr

DataStage on Cloud Pak for Data Command Injection

Published Oct 12, 2026 · Updated Oct 12, 2026 · Assigned by ibm

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References