VulnSocial

CVE-2026-81212

LOWCVSS 10.0 · CRITICAL

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • ThreatAft@ThreatAft

    🔐 CVE-2026-81212 — IBM DataStage 10.0. No creds. Write to shared Redis under any tenant’s key. Poison flow params. Harvest creds. Nothing goes down. Fix: CP4D 5.4 patch 8. Some feeds say no patch. It’s wrong. https://threataft.com/articles/ibm-datastage-cve-2026-81212-redis-tenant-write #infosec #IBMDataStage #Redis #vulnerability

    0000040
    52 followersView on X

Explore more

Back to dashboard