Remote Code Execution Risk in IBM Guardium Data Protection Software
CVE-2026-84082

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
18 September 2026

What is CVE-2026-84082?

A vulnerability in IBM Guardium Data Protection version 12.2 could enable a remote attacker to execute arbitrary SQL commands. This is due to improper handling of certain elements in SQL commands, potentially leading to unauthorized access or manipulation of the database. Organizations using this version should evaluate their security measures and apply relevant patches to protect against such threats.

Affected Version(s)

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7288040
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.