Missing Authentication Vulnerability in IBM Guardium Data Protection
CVE-2026-84272

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 October 2026

What is CVE-2026-84272?

IBM Guardium Data Protection versions 12.1 and 12.2.2 are susceptible to a missing authentication flaw within the edge-controller component. This vulnerability enables an unauthenticated remote attacker to execute arbitrary container images, posing a significant risk of unauthorized control over managed edge clusters. Organizations utilizing affected versions should promptly implement the necessary patches to mitigate potential exploitation.

Affected Version(s)

Guardium Data Protection 12.2.2

Guardium Data Protection 12.1

References

https://www.ibm.com/support/pages/node/7288832
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.