CVE-2026-84884: IBM Guardium Data Protection

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.

Affected products

• IBM Guardium Data Protection: version 12.2 only

Published 2026-09-25. Last modified 2026-09-28.