CVE-2026-81212Critical· 10.0▾ MidnightIBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.
datastage_on_cloud_pak_for_data 5.4.0.0IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.
Product(s)Version(s) number and/or range Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0
Upgrade to 5.4 patch 8 or later by following these instructions https://www.ibm.com/docs/en/software-hub/5.4.x .
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-17068Medium· 5.4IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
CVE-2026-17275Low· 3.7IBM i is Affected by an Improper Validation Vulnerability
CVE-2026-10030High· 7.1IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks.
CVE-2026-94402Medium· 6.1IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation
CVE-2026-93888High· 7.8IBM Sterling Connect:Direct for Unix Buffer Overflow
CVE-2026-82891High· 8.1IBM Guardium Data Protection is affected by a security vulnerability