CVE-2026-16672 in DataStage on Cloud Pak for Data

Riassunto

di MITRE • 23/09/2026

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Ibm
• Prenotare: 22/07/2026
• Divulgazione: 23/09/2026
• Moderazione: accettato
• Voce: VDB-408752
• CPE: pronto
• CWE: CWE-78 (confermato)
• CVSS: 8.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Industry, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16672
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16672
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16672/