CVE-2026-16432

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0

Description The PxXMLInput operator is susceptible to XML external entity (XXE) injection. This flaw allows a remote authenticated attacker to obtain sensitive information. XXE injection occurs when an XML parser improperly handles external entity references within an XML document, potentially allowing the disclosure of internal files or server data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.