CVE-2026-16672

HIGH 8.8CVE-2026-16672 · Published 22/09/2026 · updated 25/09/2026

In short

CVE-2026-16672 is a HIGH (CVSS 8.8) vulnerability affecting datastage on cloud pak for data (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 56.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
datastage on cloud pak for data ibm	`= 5.4.0`	No fix yet

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

References

ibm.com/support/pages/node/7288649 · Patch

More vulnerabilities in datastage on cloud pak for data

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

datastage on cloud pak for data

ibm

= 5.4.0

No fix yet

More vulnerabilities in datastage on cloud pak for data

See all →