CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by cross-site request forgery (CSRF) , allowing a remote attacker with no privileges but requiring user interaction to perform unauthorized actions. The flaw is attributed to open source software components within the product, as indicated b...

CVE-2026-80434 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference...

CVE-2026-81554 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82095 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82098 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82099

CVE-2026-82099 affects IBM DataStage on Cloud Pak for Data 5.4.0.0 , where a remote authenticated attacker can execute arbitrary code due to OS command injection (CWE-78) — improper neutralization of special elements in an OS command. The vulnerability is network-exploitable with low complexity a...

CVE-2026-82099 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82100 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82107 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

CVE-2026-75731

creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:07+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y4cqaxs2k...

CVE-2026-4130

creationtimestamp| type| source ---|---|--- 2026-09-10 20:54:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wr6md342c...

CVE-2026-89049

creationtimestamp| type| source ---|---|--- 2026-09-10 19:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6rhjxnwz22 2026-09-14 15:30:32+00:00| seen| https://bsky.app/profile/newsfacts.bsky.social/post/3mvigipepbk2a 2026-09-14 23:06:45+00:00| seen|...

CVE-2026-89043

creationtimestamp| type| source ---|---|--- 2026-09-10 19:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvntudj22 2026-09-10 20:09:01+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6u6yq6fm2r...

CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...

UBUNTU-CVE-2026-88053

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATAINTTEMP component of a crafted .traineddata file and uses those values as loop bounds without validati...

CVE-2026-88049

creationtimestamp| type| source ---|---|--- 2026-09-10 18:05:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4snaaeueunf7v 2026-09-15 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvkd7nokwu24...

CVE-2026-88027

creationtimestamp| type| source ---|---|--- 2026-09-10 18:02:46+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv6n5a5fd42j 2026-09-11 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:21+00:00| seen|...

CVE-2026-85228

creationtimestamp| type| source ---|---|--- 2026-09-10 18:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzwzcxb2k 2026-09-11 05:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7uo3diay24...