CVE WatchSep 10, 2026

CVE-2026-82092

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-p

CVSS

8.8

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Sep 10, 2026 · Last modified: Sep 10, 2026 · CWE-36

EPSS · 30d

Not enough EPSS history yet.

Technical description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

Official references

www.ibm.comhttps://www.ibm.com/support/pages/node/7286562

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-684879.9 CRI

—

———Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.10h CVE-2026-882886.5 MED

—

———GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi, allowing a remote user with valid web credentials to read arbitrary files accessible to the root-run web service.14h CVE-2026-696127.8 HIG

28.5%

——9Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.2d CVE-2026-688967.8 HIG

28.5%

——9Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.2d CVE-2026-476305.5 MED

10.5%

——3NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution.9d CVE-2026-476066.5 MED

40.9%

——12NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.9d