CVE-2026-16338: ibm datastage_on_cloud_pak_for_data

CVSS 9.9 (critical) · published 2026-09-14

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.

Affected products (NVD): ibm datastage_on_cloud_pak_for_data

Weakness: CWE-73

Source: NVD CVE-2026-16338

References

• https://www.ibm.com/support/pages/node/7286562

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.