{"affected":[{"product":"DataStage on Cloud Pak for Data","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"5.4.0.0"}]}],"cveId":"CVE-2026-80435","cwes":["CWE-611"],"description":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1794163233097,"publishedAt":1794163233097,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7294270"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing the vulnerability now by upgrading DataStage on Cloud Pak for Data.\n\nProduct(s)Version(s) number and/or range Remediation/Fix/InstructionsDataStage on Cloud Pak for Data5.4.0.0\n\nUpgrade to 5.4 patch 8 or later by following these  instructions https://www.ibm.com/docs/en/software-hub/5.4.x ."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7294270"}],"revision":"a5dc3c8330cc5a250fd66fef2256128ca8e637f127b5b3eabda56798032cf105","sources":[{"modifiedAt":1794163233097,"name":"CNA: ibm","retrievedAt":1794164939552,"url":"https://www.cve.org/CVERecord?id=CVE-2026-80435"}],"ssvc":null,"status":"published","title":"DataStage on Cloud Pak for Data has several vulnerabilities","updatedAt":1794164939552}