What’s Vulnerable › Vulnerabilities
CVE-2025-14754: IBM Cloud Pak for Data is vulnerable to OS command injection
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-18 · updated 2026-10-14
- Weakness: CWE-78
Description
IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
Affected products
- IBM Cloud Pak for Data: 5.1.2
References
Get alerted when CVE-2025-14754 or the next vulnerability affects your stack