IBM Guardium Data Protection vulnerabilities

92 CVEs affecting IBM Guardium Data Protection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-87980, published 2026-10-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-85542, published 2026-09-25. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes…
CVE-2026-84278, published 2026-10-08. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands…
CVE-2026-84071, published 2026-09-18. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename…
CVE-2026-81937, published 2026-09-18. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands…
CVE-2026-81669, published 2026-09-18. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands…
CVE-2026-84086, published 2026-09-18. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
CVE-2026-81657, published 2026-09-18. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
CVE-2026-82887, published 2026-09-18. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-82967, published 2026-09-18. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management…
CVE-2026-84440, published 2026-09-29. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause…

Latest

CVE-2026-87980, published 2026-10-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.
CVE-2026-84891, published 2026-10-08. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.
CVE-2026-84875, published 2026-10-08. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-84249, published 2026-10-08. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.
CVE-2026-84247, published 2026-10-08. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
CVE-2026-84246, published 2026-10-08. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-84230, published 2026-10-08. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.
CVE-2026-84209, published 2026-10-08. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
CVE-2026-84198, published 2026-10-08. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-84058, published 2026-10-08. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS…