CVE-2026-16325

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a script execution flaw (CVE-2026-16325 ) caused by the improper neutralization of input in the X-Forwarded-Host header (CWE-79 ). A remote authenticated attacker can exploit this to execute arbitrary scripts. IBM strongly recom...