CVE-2026-81537

EPSS 0.98%
Veröffentlicht 23.09.2026 21:39:25
Zuletzt bearbeitet 06.10.2026 16:13:02
Erkennungen
Login

DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Datastage On Cloud Pak For Data Version 5.4.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.98%	0.607

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://www.ibm.com/support/pages/node/7288649

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-81537

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-81537

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-81537

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-81537