Improper Privilege Management in IBM Guardium Data Protection
CVE-2026-84089

7.8HIGH

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
18 September 2026

What is CVE-2026-84089?

IBM Guardium Data Protection 12.2 is exposed to a vulnerability that could enable a local attacker to elevate their privileges due to improper management of user permissions. This flaw may allow unauthorized access to sensitive operations and data, making it essential for users to apply recommended patches to secure their systems and mitigate potential risks.

Affected Version(s)

Guardium Data Protection 12.2

References

https://www.ibm.com/support/pages/node/7288035
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.