Missing Authentication Vulnerability in IBM Guardium Data Protection
CVE-2026-84078

9.9CRITICAL

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
18 September 2026

What is CVE-2026-84078?

IBM Guardium Data Protection 12.2 contains a vulnerability related to missing authentication in the LoadBalancerServlet. This flaw allows unauthenticated users to gain access to sensitive load-balancer operations. Exploiting this vulnerability could potentially enable unauthorized actions, compromising the integrity and availability of the system, and exposing critical data to risks.

Affected Version(s)

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7288040
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.