boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-82110

IBM DataStage on Cloud Pak for Data — DataStage on Cloud Pak for Data Path Traversal
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  H  H    9.9   .0052   42.6     —
AFFECTED
  Product                          Versions   Fixed
  DataStage on Cloud Pak for Data  5.4.0.0 –  —
TIMELINE
  Aug 28  Reserved by ibm
  Oct 12  Published (CNA: ibm)
  Oct 14  RESCORED — CVE-2026-82110 (IBM DataStage on Cloud Pak for Data). CVSS 9.6 → 9.9 (NVD).
CWE-22 · CNA: ibm · CVSS v3.1 · 1 reference · NVD status: Analyzed

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
August 28, 2026ReservedReserved by ibm
October 12, 2026PublishedPublished (CNA: ibm)
October 14, 2026RESCOREDRESCORED — CVE-2026-82110 (IBM DataStage on Cloud Pak for Data). CVSS 9.6 → 9.9 (NVD).

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
IBMDataStage on Cloud Pak for Data—5.4.0.0—

Weaknesses

CWE-22

References (1)

Related

Authoritative record: CVE-2026-82110 at cve.org

Vendors: ibm

Weaknesses: CWE-22

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-82110 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.