ibm datastage-on-cloud-pak-data CVE-2026-82108 is a vulnerability in IBM Datastage On Cloud Pak Data
Published on October 12, 2026

DataStage on Cloud Pak for Data Code Injection
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-82108 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Code Injection Vulnerability?

The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CVE-2026-82108 has been classified to as a Code Injection vulnerability or weakness.


Products Associated with CVE-2026-82108

Want to know whenever a new CVE is published for IBM Datastage On Cloud Pak Data? stack.watch will email you.

IBM Datastage On Cloud Pak Data
 

Affected Versions

IBM DataStage on Cloud Pak for Data Version 5.4.0.0 is affected by CVE-2026-82108