CVE-2026-82108
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements us…
Published Oct 12, 2026 · updated Oct 14, 2026 · ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 12, 2026 · NIST NVD
Detected
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Oct 14, 2026 · NIST NVD
Updated
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Affected
- cpe ibm/datastage on cloud pak for data5.4.0
Sources
- CVE.orgVulnerability recordCVE-2026-82108
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-82108
30-day exploitation probability 0.5%
first.org - NIST NVDVulnerability recordCVE-2026-82108
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
nvd.nist.gov