IBM Cloud Pak For Data System vulnerabilities

2 CVEs affecting IBM Cloud Pak For Data System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-14350, published 2026-09-04.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-14350, published 2026-09-04. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log…
• CVE-2026-3686, published 2026-08-28. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources.