CVE-2026-84075: IBM Guardium Data Protection

Critical severity, CVSS 9.9. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.

Affected products

• IBM Guardium Data Protection: version 12.2 only

Published 2026-09-18. Last modified 2026-10-06.