CVE-2026-16338
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.
- Published Sep 14, 2026
- CVSS 9.9 critical
- 0.4% chance of exploitation in the next 30 days (EPSS)