datastage on cloud pak for data vulnerabilities and fixes

Recent CVEs affecting datastage on cloud pak for data, with upgrade or downgrade steps. 51 tracked.

Also searched as: datastageoncloudpakfordata.

datastage on cloud pak for data has 51 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-12. Highest priority: CVE-2026-81537 (score 50/100).

CVE-2026-82096 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82101 CRITICAL 9.6 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s
CVE-2026-82103 CRITICAL 9.6 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in
CVE-2026-82108 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82110 CRITICAL 9.6 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-84418 HIGH 7.4 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS cer
CVE-2026-16346 CRITICAL 9.9 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-81548 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-81549 CRITICAL 9.6 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in
CVE-2026-81552 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82093 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82094 HIGH 7.1 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directorie
CVE-2026-80379 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-80412 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-80425 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-80423 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in
CVE-2026-81208 HIGH 7.7 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information
CVE-2026-81536 HIGH 7.7 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in
CVE-2026-81537 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-81539 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-81545 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-81547 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-16335 HIGH 8.1 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read,
CVE-2026-16338 CRITICAL 9.9 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perfo
CVE-2026-16428 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execu
CVE-2026-16432 HIGH 7.7 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticat
CVE-2026-16466 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execu
CVE-2026-16673 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execu
CVE-2026-84421 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-16468 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-16469 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute
CVE-2026-16672 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-17102 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-80436 HIGH 8.5 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s
CVE-2026-80434 HIGH 7.4 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime
CVE-2026-80424 CRITICAL 9.1 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary fi
CVE-2026-80380 HIGH 7.1 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due
CVE-2026-80378 HIGH 8.5 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s
CVE-2026-81210 HIGH 7.7 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format pa
CVE-2026-81207 HIGH 8.5 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or ro
CVE-2026-81540 HIGH 8.5 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset f
CVE-2026-81550 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-81554 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in
CVE-2026-81551 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write t
CVE-2026-82092 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in
CVE-2026-82095 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82097 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82098 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82099 HIGH 8.8 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c
CVE-2026-82100 CRITICAL 9.6 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s
CVE-2026-82107 CRITICAL 9.6 DOWNGRADE IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive in

FAQ

How do I fix datastage on cloud pak for data vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is datastage on cloud pak for data being exploited right now?

None of the tracked datastage on cloud pak for data CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which datastage on cloud pak for data CVE should I patch first?

CVE-2026-81537 currently ranks highest (50/100): IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c.

RSS feed for datastage on cloud pak for data · ← Back to latest CVEs