Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2537▼ 356 respecto a la semana anterior

Críticas / altas1341▲ 75 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

60 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-84421	Analizada	Alta (8.8)	0.57%	—	IBM Datastage ON Cloud PAK FOR Data	29/9/2026	2/10/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during archive extraction.
CVE-2026-82094	En análisis	Alta (7.1)	0.28%	—	IBM Datastage^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory.
CVE-2026-82093	En análisis	Alta (8.8)	0.41%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data.
CVE-2026-81552	En análisis	Alta (8.8)	0.75%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables.
CVE-2026-81549	En análisis	Crítica (9.6)	0.26%	—	IBM Datastage^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header.
CVE-2026-81548	En análisis	Alta (8.8)	0.75%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	24/9/2026	26/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81547	En análisis	Alta (8.8)	0.92%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.
CVE-2026-81545	En análisis	Alta (8.8)	0.85%	—	IBM Datastage^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-81539	En análisis	Alta (8.8)	0.44%	—	IBM Datastage^AI	24/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-81537	En análisis	Alta (8.8)	0.98%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	26/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.
CVE-2026-81536	En análisis	Alta (7.7)	0.28%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
CVE-2026-81208	En análisis	Alta (7.7)	0.23%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.
CVE-2026-80423	En análisis	Alta (8.8)	0.33%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts.
CVE-2026-80425	En análisis	Alta (8.8)	0.94%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-80412	En análisis	Alta (8.8)	0.54%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	26/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values during OSH script generation.
CVE-2026-80379	En análisis	Alta (8.8)	0.94%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	23/9/2026	24/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-17102	Analizada	Alta (8.8)	0.58%	—	IBM Datastage ON Cloud PAK FOR Data	22/9/2026	25/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16672	Analizada	Alta (8.8)	0.55%	—	IBM Datastage ON Cloud PAK FOR Data	22/9/2026	25/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-16469	Analizada	Alta (8.8)	0.96%	—	IBM Datastage ON Cloud PAK FOR Data	22/9/2026	25/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16468	Analizada	Alta (8.8)	1.7%	—	IBM Datastage ON Cloud PAK FOR Data	22/9/2026	25/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection.
CVE-2026-16346	En análisis	Crítica (9.9)	0.45%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	22/9/2026	23/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16673	En análisis	Alta (8.8)	0.42%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	14/9/2026	16/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property.
CVE-2026-16466	En análisis	Alta (8.8)	0.91%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	14/9/2026	16/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection.
CVE-2026-16432	En análisis	Alta (7.7)	0.34%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	14/9/2026	16/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
CVE-2026-16428	En análisis	Alta (8.8)	0.54%	—	IBM Datastage^AI IBM Cloud PAK FOR Data^AI	14/9/2026	16/9/2026	IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine.