CVE-2026-80434

Received Received - Intake

IBM DataStage Cache Manipulation DoS Vulnerability

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-80434

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	datastage_on_cloud_pak_for_data	5.4.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

IBM DataStage on Cloud Pak for Data 5.4.0.0 has a vulnerability where a remote authenticated attacker can manipulate runtime caches. This leads to a denial of service due to an insecure direct object reference, potentially allowing unauthorized actions.

Impact Analysis

This vulnerability could allow an attacker to disrupt services by causing a denial of service. It may also enable unauthorized access or manipulation of data, depending on the attacker's goals and system configuration.

Compliance Impact

The vulnerability allows remote authenticated attackers to manipulate runtime caches, potentially causing denial of service. This could lead to unauthorized access or disruption of data processing, which may impact compliance with standards like GDPR (data availability) or HIPAA (service reliability). However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Apply IBM-provided patches or updates for IBM DataStage on Cloud Pak for Data 5.4.0.0 to address the insecure direct object reference vulnerability. Ensure proper access controls are enforced to prevent unauthorized manipulation of runtime caches.

Hi! I’m here to help you understand CVE-2026-80434. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70