CVE-2026-81208CWE-522

CVE-2026-81208

High · published September 24, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.9th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-09-24T02:16Z
Affected products (1)
ProductVersionsFixed in
ibm/datastage_on_cloud_pak_for_dataall versions—
References (1)
https://www.ibm.com/support/pages/node/7288649 · [email protected]
EPSS history
Timeline
  • 25 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 23 SEP 21:37Z
    DataStage on Cloud Pak for Data has several vulnerabilities
    cvelistv5