Skip to content
OpenAdvisories
High · 8.8 CVE-2026-82108 EUVD-2026-98068GHSA-c99q-whh9-8mwq

DataStage on Cloud Pak for Data Code Injection

Published Oct 12, 2026 · Updated Oct 12, 2026 · Assigned by ibm

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Affected products

VendorProductAffectedFixed
IBM DataStage on Cloud Pak for Data 5.4.0.0 —

References