CVE-2026-81545DataStage on Cloud Pak for Data has several vulnerabilitiesCVSS8.8High–Not in KEV0.9%EPSS1article
CVE-2026-81551IBM DataStage on Cloud Pak for Data vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article
CVE-2026-82100IBM DataStage on Cloud Pak for Data vulnerabilityCVSS9.6Critical–Not in KEV0.6%EPSS1article
CVE-2026-17102IBM DataStage on Cloud Pak for Data vulnerabilityCVSS8.8High–Not in KEV0.6%EPSS1article
CVE-2026-84421DataStage on Cloud Pak for Data has several vulnerabilitiesCVSS8.8High–Not in KEV0.6%EPSS1article
CVE-2026-82107IBM DataStage on Cloud Pak for Data vulnerabilityCVSS9.6Critical–Not in KEV0.5%EPSS1article
CVE-2026-16346IBM DataStage on Cloud Pak for Data vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-16338DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareCVSS9.9Critical–Not in KEV0.4%EPSS1article
CVE-2026-84418DataStage on Cloud Pak for Data Improper Certificate ValidationCVSS7.4High–Not in KEV0.1%EPSS1article
How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.