CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-81549 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...

·Source: NIST NVD

Updated:

Executive Summary

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header.

Analysis

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header. CVSS Score: 9.6. Published: 2026-09-24T15:17:39.897.

Indicators of Compromise (2)

CVE (1)
CVE-2026-81549
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 24, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Controversial spyware firm Paragon to go public by end of year

The company plans to close the deal around the end of the year at which point Paragon will begin trading on Nasdaq under the REDLattice umbrella.

The Record
CRITICALVulnerability

NVD CRITICAL: CVE-2026-53988 — Dockhand before 1.0.40 contains an authentication bypass vulnerability in its gi...

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send unsigned webhook requests to force git clone and docker compose operations, enabling denial of service or,

CVE-2026-53988
NIST NVD
MEDIUMVulnerability

FBI tells ShinyHunters members to turn themselves in after recent arrest

The FBI is warning members of the ShinyHunters extortion group to turn themselves in after Dutch police arrested a man the bureau described as one of the group's alleged leaders. [...]

BleepingComputer