{"affected":[{"product":"DataStage on Cloud Pak for Data","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"5.4.0.0"}]}],"cveId":"CVE-2026-16433","cwes":["CWE-22"],"description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to a path traversal vulnerability.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"}],"modifiedAt":1794159438561,"publishedAt":1794159438561,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7294270"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0\n\nUpgrade to 5.4 patch 8 or later by following these  instructions https://www.ibm.com/docs/en/software-hub/5.4.x ."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7294270"}],"revision":"7c631a84511577d437d68df03ecfea523eef463cc0fdcb7ffda5a87b960f32ac","sources":[{"modifiedAt":1794159438561,"name":"CNA: ibm","retrievedAt":1794161333634,"url":"https://www.cve.org/CVERecord?id=CVE-2026-16433"}],"ssvc":null,"status":"published","title":"DataStage on Cloud Pak for Data has several vulnerabilities","updatedAt":1794161333634}