Denial of Service in IBM DataStage on Cloud Pak for Data
CVE-2026-80436

8.5HIGH

Key Information:

Vendor

IBM
Status
Datastage On Cloud Pak For Data
Vendor
CVE Published:
10 September 2026

What is CVE-2026-80436?

A security vulnerability exists in IBM DataStage on Cloud Pak for Data 5.4.0.0, whereby a remote authenticated attacker can exploit improper authorization mechanisms. This may lead to a denial of service (DoS) condition by allowing the attacker to delete arbitrary RabbitMQ queues or exchanges, potentially disrupting services dependent on these components.

Affected Version(s)

DataStage on Cloud Pak for Data 5.4.0.0

References

https://www.ibm.com/support/pages/node/7286562
vendor-advisorypatch

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.