CVE-2026-80441: IBM Guardium Data Protection

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting in compromise of the confidentiality, integrity, and availability of the affected system.

Affected products

• IBM Guardium Data Protection: version 12.2 only

Published 2026-09-18. Last modified 2026-10-06.