CRITICALCVSS v3.1 10.0Vulnerability

CVE-2026-81212

IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's credential-encryption boundary and lets an anonymous caller poison any tenant's cached flow parameters.

Properties

Severity
CRITICAL
Nvd fetched at
2026-10-23T02:14:06.697318+00:00
Epss score
0.00267
Cvss score
10
Cvss severity
CRITICAL
Retrieved at
2026-10-23T02:20:30+00:00
Score
10
Last source
NVD
Cvss version
3.1
Cve id
CVE-2026-81212
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
First seen by Signal
2026-10-21T22:34:38+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Published at
2026-10-20T22:19:51.737
Last modified
2026-10-21T14:27:54.967
Epss percentile
0.17792

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-81212 (CVSS v3.1 10) — Ninja Signal Threat Intelligence | Ninja Signal