CVE-2026-82107

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Published Sep 10, 2026 CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication.

Analysis

Technical impact

This vulnerability arises from improper authentication handling in IBM DataStage on Cloud Pak for flaw to retrieve sensitive weakness is an authentication failure (CWE-287) that allows attackers to gain elevated access beyond what is intended by the system.

Affected Systems

It affects IBM DataStage on Cloud Pak for Data version 5.4.0.0 installed in Cloud Pak environments. The official advisory recommends that any deployments running this version be upgraded.

Risk and Exploitability

The CVSS score of 9.6 marks this as a critical vulnerability, and while the EPSS score is not available, the lack of KEV listing does not diminish the risk of exploitation. The likely attack vector is remote, authenticated access, meaning an adversary with valid credentials can leverage the flaw from any network location that can reach the application.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

IBM

DataStage on Cloud Pak for Data

affected

Version	Status	Constraints
`5.4.0.0`	affected	—

Configuration 1 [-]

cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Ibm

Datastage On Cloud Pak For Data

Version	Status	Scheme	Platform
`5.4.0.0`	affected	generic	—

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data. Product(s)Version(s) number and/or range Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0 Upgrade to 5.4 patch 5 or later by following these instructions https://www.ibm.com/docs/en/software-hub/5.4.x .

OpenCVE Recommended Actions

Upgrade DataStage on Cloud Pak for Data to patch 5 or later following IBM’s instructions
Replace any default or weak administrative credentials with strong, unique passwords
Restrict user permissions to the minimum required roles and monitor for unauthorized activity

Generated by OpenCVE AI on September 11, 2026 at 04:34 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.538% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://www.ibm.com/support/pages/node/7286562

History

Sep 16, 2026 12:45 AM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0:::::::*

Sep 11, 2026 2:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 10, 2026 9:45 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication.
Title		DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
First Time appeared		Ibm Ibm datastage On Cloud Pak For Data
Weaknesses		CWE-287
CPEs		cpe:2.3:a:ibm:datastage_on_cloud_pak_for_data:5.4.0.0:::::::*
Vendors & Products		Ibm Ibm datastage On Cloud Pak For Data
References		https://www.ibm.com/support/pages/node/7286562
Metrics		cvssV3_1 `{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N'}`