Findings

CVE-2026-82096

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element…

Published Oct 12, 2026 · updated Oct 14, 2026 · ibm datastage on cloud pak for data

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 12, 2026 · NIST NVD

    Detected

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

  2. Oct 14, 2026 · NIST NVD

    Updated

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected

  • cpe ibm/datastage on cloud pak for data5.4.0

Sources

  • CVE.orgCVE-2026-82096

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-82096

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDCVE-2026-82096

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    nvd.nist.gov

References

CVE-2026-82096 · ZeroDay Findings