CVE-2026-85029: IBM Guardium Data Protection

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.

Affected products

• IBM Guardium Data Protection: version 12.2 only

Published 2026-09-25. Last modified 2026-09-28.