SQL Injection Vulnerability in IBM Guardium Data Protection
CVE-2026-81932

8.6HIGH

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 October 2026

What is CVE-2026-81932?

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are susceptible to an SQL injection flaw that allows remote, unauthenticated attackers to execute specially crafted SQL commands. This vulnerability enables attackers to perform unauthorized actions, including viewing, adding, modifying, or deleting information stored in the back-end database. Organizations using these versions of Guardium Data Protection should apply the necessary patches to safeguard their data and system integrity.

Affected Version(s)

Guardium Data Protection 12.0

Guardium Data Protection 12.1

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7291674
vendor-advisorypatch

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.