# IBM Datastage On Cloud Pak For Data vulnerabilities Source: https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 48 vulnerabilities in IBM Datastage On Cloud Pak For Data: 5 in the last 7 days and 48 in the last 90 days, 11 of them critical and 0 exploited in the wild. The most recent, CVE-2026-80435, was published on 8 November 2026. 12 vulnerabilities in the last four weeks, down 33% on the four before (18). 5 critical against 3. ## Counts - Last 7 days: 5 - Last 30 days: 6 - Last 90 days: 48 - All time: 48 (11 critical, 0 exploited in the wild) ## About IBM Datastage On Cloud Pak For Data IBM Cloud Pak for Data service for data management and analytics. ## Latest IBM Datastage On Cloud Pak For Data vulnerabilities - [CVE-2026-80435: IBM DataStage XXE injection in Cloud Pak for Data](https://junglewise.ai/threats/cve-2026-80435-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (medium, CVSS 5, published 8 Nov 2026) - [CVE-2026-16433: IBM DataStage path traversal arbitrary file write](https://junglewise.ai/threats/cve-2026-16433-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-16325: IBM DataStage on Cloud Pak for Data XSS in X-Forwarded-Host header](https://junglewise.ai/threats/cve-2026-16325-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (medium, CVSS 4.4, published 8 Nov 2026) - [CVE-2026-107331: IBM DataStage on Cloud Pak for Data path traversal](https://junglewise.ai/threats/cve-2026-107331-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.9, published 8 Nov 2026) - [CVE-2026-107330: IBM DataStage on Cloud Pak for Data SSRF](https://junglewise.ai/threats/cve-2026-107330-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 7.7, published 8 Nov 2026) - [CVE-2026-81212: IBM DataStage on Cloud Pak for Data unauthenticated Redis write](https://junglewise.ai/threats/cve-2026-81212-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-allows-an) (critical, CVSS 10, published 20 Oct 2026) - [CVE-2026-84418: IBM DataStage on Cloud Pak for Data TLS certificate validation bypass](https://junglewise.ai/threats/cve-2026-84418-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-can-allow-a-man-in) (high, CVSS 7.4, published 12 Oct 2026) - [CVE-2026-82110: IBM DataStage path traversal arbitrary code execution](https://junglewise.ai/threats/cve-2026-82110-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 12 Oct 2026) - [CVE-2026-82108: IBM DataStage on Cloud Pak for Data OS command injection](https://junglewise.ai/threats/cve-2026-82108-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 12 Oct 2026) - [CVE-2026-82103: IBM DataStage on Cloud Pak for Data information disclosure](https://junglewise.ai/threats/cve-2026-82103-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 12 Oct 2026) - [CVE-2026-82101: IBM DataStage path traversal denial of service](https://junglewise.ai/threats/cve-2026-82101-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 12 Oct 2026) - [CVE-2026-82096: IBM DataStage on Cloud Pak for Data OS command injection](https://junglewise.ai/threats/cve-2026-82096-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 12 Oct 2026) - [CVE-2026-84421: IBM DataStage path traversal in archive extraction](https://junglewise.ai/threats/cve-2026-84421-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 29 Sep 2026) - [CVE-2026-82093: IBM DataStage unsafe deserialization remote code execution](https://junglewise.ai/threats/cve-2026-82093-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 24 Sep 2026) - [CVE-2026-81549: IBM DataStage on Cloud Pak for Data SSRF via X-Forwarded-Proto header](https://junglewise.ai/threats/cve-2026-81549-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 24 Sep 2026) - [CVE-2026-81548: IBM DataStage on Cloud Pak for Data OS command injection](https://junglewise.ai/threats/cve-2026-81548-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 24 Sep 2026) - [CVE-2026-81547: IBM DataStage on Cloud Pak for Data path traversal command execution](https://junglewise.ai/threats/cve-2026-81547-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 24 Sep 2026) - [CVE-2026-81539: IBM DataStage on Cloud Pak for Data OS command injection](https://junglewise.ai/threats/cve-2026-81539-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 24 Sep 2026) - [CVE-2026-81537: IBM DataStage OS command injection](https://junglewise.ai/threats/cve-2026-81537-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-81536: IBM DataStage on Cloud Pak for Data XXE injection](https://junglewise.ai/threats/cve-2026-81536-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 7.7, published 23 Sep 2026) - [CVE-2026-80423: IBM DataStage on Cloud Pak for Data secrets exposure via file mounts](https://junglewise.ai/threats/cve-2026-80423-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-80412: IBM DataStage code injection in connector property escaping](https://junglewise.ai/threats/cve-2026-80412-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-80379: IBM DataStage OS command injection in Cloud Pak for Data](https://junglewise.ai/threats/cve-2026-80379-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-17102: IBM DataStage on Cloud Pak for Data OS command injection](https://junglewise.ai/threats/cve-2026-17102-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 22 Sep 2026) - [CVE-2026-16672: IBM DataStage on Cloud Pak for Data OS command injection](https://junglewise.ai/threats/cve-2026-16672-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (high, CVSS 8.8, published 22 Sep 2026) ## Most severe IBM Datastage On Cloud Pak For Data vulnerabilities - [CVE-2026-81212: IBM DataStage on Cloud Pak for Data unauthenticated Redis write](https://junglewise.ai/threats/cve-2026-81212-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-allows-an) (critical, CVSS 10, published 20 Oct 2026) - [CVE-2026-16346: IBM DataStage command injection on Cloud Pak for Data](https://junglewise.ai/threats/cve-2026-16346-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-16338: IBM DataStage arbitrary file write via path validation bypass](https://junglewise.ai/threats/cve-2026-16338-ibm-datastage-arbitrary-file-write-via-path-validation-bypass) (critical, CVSS 9.9, published 14 Sep 2026) - [CVE-2026-107331: IBM DataStage on Cloud Pak for Data path traversal](https://junglewise.ai/threats/cve-2026-107331-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.9, published 8 Nov 2026) - [CVE-2026-82100: IBM DataStage path traversal denial of service](https://junglewise.ai/threats/cve-2026-82100-ibm-datastage-path-traversal-denial-of-service) (critical, CVSS 9.6, published 10 Sep 2026) - [CVE-2026-82107: IBM DataStage authentication bypass and information disclosure](https://junglewise.ai/threats/cve-2026-82107-ibm-datastage-authentication-bypass-and-information-disclosure) (critical, CVSS 9.6, published 10 Sep 2026) - [CVE-2026-82110: IBM DataStage path traversal arbitrary code execution](https://junglewise.ai/threats/cve-2026-82110-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 12 Oct 2026) - [CVE-2026-82101: IBM DataStage path traversal denial of service](https://junglewise.ai/threats/cve-2026-82101-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 12 Oct 2026) - [CVE-2026-82103: IBM DataStage on Cloud Pak for Data information disclosure](https://junglewise.ai/threats/cve-2026-82103-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 12 Oct 2026) - [CVE-2026-81549: IBM DataStage on Cloud Pak for Data SSRF via X-Forwarded-Proto header](https://junglewise.ai/threats/cve-2026-81549-ibm-datastage-on-cloud-pak-for-data-5-4-0-0-could-allow-a-remote) (critical, CVSS 9.6, published 24 Sep 2026) ## Vulnerabilities per week 12 vulnerabilities in the last four weeks, down 33% on the four before (18). 5 critical against 3. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 18 | 3 | 0 | | 14 Sep 2026 | 2 | 1 | 0 | | 21 Sep 2026 | 15 | 2 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 6 | 3 | 0 | | 19 Oct 2026 | 1 | 1 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 5 | 1 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other IBM technologies - [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities - [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities - [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities - [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities - [IBM Guardium Data Protection](https://junglewise.ai/threats/technologies/guardium-data-protection): 93 vulnerabilities - [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities - [IBM Vios](https://junglewise.ai/threats/technologies/vios): 72 vulnerabilities - [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities - [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities - [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities - [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities - [IBM Financial Transaction Manager](https://junglewise.ai/threats/technologies/financial-transaction-manager): 45 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM Datastage On Cloud Pak For Data vulnerabilities", https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data, 12 November 2026.