AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2025-14754

IBM Cloud Pak for Data: code execution

IBM

CVE-2025-14754 · Published Sep 18, 2026 · updated Sep 22, 2026

High8.8
No fix yet
IBM advisory

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

Affected versions

PackageAffectedFixed in
Cloud Pak for Data
Product
<= 5.1.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More IBM advisories

All IBM
High 8.1Sep 18IBM Guardium Data Protection: improper authorizationCVE-2026-84241no fix yetHigh 8.8Sep 18IBM Guardium Data Protection: cross-site request forgeryCVE-2026-84084no fix yetHigh 8.1Sep 18IBM Guardium Data Protection: command injectionCVE-2026-84085no fix yetHigh 7.2Sep 18IBM Guardium Data Protection: remote code executionCVE-2026-84086no fix yetHigh 7.8Sep 18IBM Guardium Data Protection: privilege escalationCVE-2026-84089no fix yetHigh 7.7Sep 18IBM Guardium Data Protection: information disclosureCVE-2026-84105no fix yet