Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

IBM DataStage on Cloud Pak for Data may leak sensitive data

CVE-2026-82103 · published today
Summary

The version 5.4.0.0 of IBM DataStage on Cloud Pak for Data can expose confidential information to someone who has a valid login but should not see it. This could let an attacker who is already authorized view data they shouldn’t access. Upgrade to the latest release or apply the vendor’s security update to close the exposure.

Original advisory text
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor.
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.6 Critical
Type
CWE-200Information Exposure
Timeline
Published12 Oct 2026
Updated12 Oct 2026
First seen12 Oct 2026
Sources
CVE-2026-82103 · NVD
Track software like this
Free during beta