SEPTEMBER 26, 2026
Live Feed
Back to database
Case File

CVE-2026-16672

HIGH · CVSS 8.8 EPSS 0.54%

Source: NVD + CISA KEV + EPSS · Published 2026-09-22 · Last synced 2026-09-26

CyberRota Analysis

AI-Generated

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to remote code execution due to improper handling of special characters in OS commands, allowing authenticated attackers to execute arbitrary code. Organizations utilizing this version of IBM DataStage should prioritize patching to mitigate the risk of exploitation. Immediate action is recommended for environments where sensitive data is processed or managed.

CVE
CVE-2026-16672
Severity
HIGH
CVSS
8.8
EPSS
0.54%

Original NVD Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-17102 HIGH CVE-2026-16469 HIGH CVE-2026-16468 HIGH CVE-2026-11538 LOW CVE-2026-11378 HIGH CVE-2026-11375 HIGH