AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-81208

IBM DataStage on Cloud Pak for Data: information disclosure

IBM

CVE-2026-81208 · Published Sep 23, 2026 · updated Oct 6, 2026

High7.7
No fix yet
IBM advisory

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.

Affected versions

PackageAffectedFixed in
DataStage on Cloud Pak for Data
Product
<= 5.4.0.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-522

More IBM advisories

All IBM
High 8.8Sep 23IBM DataStage on Cloud Pak for Data: information disclosureCVE-2026-80423no fix yetHigh 7.7Sep 23IBM DataStage on Cloud Pak for Data: information disclosureCVE-2026-81536no fix yetHigh 8.8Sep 23IBM DataStage on Cloud Pak for Data: remote code executionCVE-2026-81537no fix yetHigh 8.8Sep 23IBM DataStage on Cloud Pak for Data: remote code executionCVE-2026-80412no fix yetHigh 8.8Sep 23IBM DataStage on Cloud Pak for Data: remote code executionCVE-2026-80425no fix yetCritical 9.8Sep 23IBM Concert: buffer overflowCVE-2026-6730no fix yet