by Kastro
Paper/Archive/CVE-2026-84057

CVE-2026-84057

IBM Guardium Data Protection — IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 32.7.327 × 206.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Affected

ProductAffectedFixed inSource
Guardium Data Protection12.2.2–CNA
Guardium Data Protection12.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchibm.com/support/pages/node/7288832