9.9 CriticalCWE-73
CVE-2026-16338
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBMDataStage on Cloud Pak for Data
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.4%probability of exploitation in the next 30 days
Higher than 37% of scored CVEs
SeverityCVSS
9.9Critical
Description NVD
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.
Coverage 1 article · 1 outlet
- IBM DataStage Flaws Let Authenticated Attackers Write Files and Run CodeSecurityOnline · first in our coverage