EUVD-2026-75783

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...

CVE-2026-81207

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) in the ds-canvas pod , a shared-infrastructure pod on the OpenShift overlay. Any authenticated tenant—regardless of project membership or role—can fully control the scheme, host, port...

CVE-2026-81207 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...

CVE-2026-81207 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...

PT-2026-89626

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An authenticated tenant, regardless of project membership or role, can fully control the scheme, host, port, and path of an outbound fetch originating from a shared-infrastructure...