CVE-2026-81548 in DataStage

Summary

by MITRE • 09/24/2026

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: Ibm
• Reservation: 08/27/2026
• Disclosure: 09/24/2026
• Moderation: accepted
• Entry: VDB-409390
• CPE: ready
• CWE: CWE-78 (confirmed)
• CVSS: 8.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-81548
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81548
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-81548/