Buffer Overrun Vulnerability in IBM Guardium Data Protection Products
CVE-2026-84058

8.1HIGH

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 October 2026

What is CVE-2026-84058?

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are susceptible to a buffer overrun vulnerability in the TDS PRELOGIN packet decoder. A remote attacker could exploit this flaw by sending a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector. This exploitation may lead to a denial of service or enable the execution of arbitrary code on the affected Collector appliance, posing significant risks to the integrity and availability of the system.

Affected Version(s)

Guardium Data Protection 12.0

Guardium Data Protection 12.1

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7291674
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.