CVE-2026-81540

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by a path traversal vulnerability that allows a remote authenticated attacker to overwrite ruleset files belonging to other tenants . The CVSS 3.1 score is 8.5 (HIGH) with a changed scope, reflecting the cross-tenant integrity impact and low...

XML External Entity (XXE)

PMD is vulnerable to XML external entity XXE attacks. XML external entities are being parsed in ruleset files, allowing an attacker who is able to tamper the ruleset file to perform XXE attacks to forge requests or cause a denial of service condition...