CVE-2026-16338: fallo crítico en IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.9epss 0.4%
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Productos afectados
IBM · DataStage on Cloud Pak for DataCVEs relacionadas — IBM DataStage on Cloud Pak for Data
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-16468HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.7%CVE-2026-81537HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.7%CVE-2026-16466HIGHDataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareEPSS 1.6%CVE-2026-16469HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.0%CVE-2026-81547HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.9%CVE-2026-81545HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.9%