Known vulnerabilities in IBM Cloud Pak for Data System

Vendor: IBM Corporation
Software: IBM Cloud Pak for Data System
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cloud_pak_for_data_system:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 126
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cloud Pak for Data System IBM Cloud Pak for Data System is affected by 126 known vulnerabilities: 1 critical, 18 high, 78 medium, 28 low Critical High Medium Low

Vulnerabilities (126)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134270 - Use After Free
CVE-2026-45447		 CWE-416 High
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 48 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 25 more
#VU134272 - Allocation of Resources Without Limits or Throttling
CVE-2026-34183		 CWE-770 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764		 CWE-476 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU134275 - Improper Initialization
CVE-2026-45445		 CWE-665 Low
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 23 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383		 CWE-122 Low
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 35 more
#VU134277 - Out-of-bounds read
CVE-2026-9076		 CWE-125 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 36 more
#VU134278 - Out-of-bounds read
CVE-2026-34180		 CWE-125 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 36 more
#VU134279 - Improper input validation
CVE-2026-34181		 CWE-20 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU134281 - NULL Pointer Dereference
CVE-2026-42766		 CWE-476 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 37 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767		 CWE-476 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 24 more
#VU134283 - Observable discrepancy
CVE-2026-42768		 CWE-203 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 18 more
#VU134284 - Improper Certificate Validation
CVE-2026-42769		 CWE-295 Low
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 13 more
#VU134285 - Improper input validation
CVE-2026-42770		 CWE-20 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 21 more
#VU134287 - Improper Verification of Cryptographic Signature
CVE-2026-45446		 CWE-347 Medium
No
No
 8.10.26.07.SP3 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 19 more
#VU126548 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-41066		 CWE-611 Medium
No
No
 8.10.26.06.SP2 20.04.2026 SB2026042075
SB2026051813
SB2026060115
and 9 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795		 CWE-226 High
No
No
 8.10.26.07.SP3 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 6 more
#VU123124 - Improper Handling of Windows Device Names
CVE-2026-27199		 CWE-67 Medium
No
No
 8.10.26.06.SP2 23.02.2026 SB2026022322
SB2026030633
SB2026040615
and 10 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 8.10.26.07.SP3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 8.10.26.07.SP3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 93 more


Showing elements 1 - 20 out of 126