CRITICAL

CVE-2026-16338

2026-09-14 CVSS v3.1
CVSS
9.9

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.

Weakness (CWE)

CWE-73

EPSS Score

0.61%
Probability of exploitation in next 30 days
48th percentile

References

View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE