rootpwn

critical · CVSS v3 8.8 · EPSS 0.00409

CVE-2026-82887

IBM Guardium Data Protection 12.2 contains an OS command injection vulnerability. A remote authenticated attacker can leverage this flaw to

Overview

IBM Guardium Data Protection 12.2 contains an OS command injection vulnerability. A remote authenticated attacker can leverage this flaw to execute arbitrary commands on the underlying system. This poses a significant risk to data security and infrastructure integrity.

Description

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Impact

Successful exploitation compromises the confidentiality, integrity, and availability of the affected system by granting unauthorized command execution privileges. Organizations relying on this platform for data security face potential complete system takeover. The vulnerability specifically impacts administrators and security teams managing IBM Guardium environments.

Remediation

Apply the official vendor patches or security updates provided by IBM for Guardium Data Protection 12.2 immediately. Restrict administrative network access to trusted management segments and enforce strict the principle of least privilege for authenticated accounts.

Risk context

Rated as a critical severity vulnerability with a CVSS score of 8.8, indicating severe potential impact. The current EPSS score is 0.00409, reflecting a low immediate exploitation probability in the wild, but the critical severity warrants prompt patching.

Affected products

  • IBM Guardium Data Protection 12.2

Scores

Severity
critical
CVSS v2
9
CVSS v3
8.8
CVSS v4
—
EPSS
0.00409

cve ibm guardium command-injection critical remote-authenticated

← All CVEs

Related CVEs

critical

CVE-2026-84434

The Gravity Forms plugin for WordPress up to version 3.1.0.4 contains an arbitrary file upload vulnerability in the upload_file function. A validation mismatch allows unauthenticated attackers to bypass extension checks on hidden file upload fields and achieve remote code execution. This flaw poses a critical risk to websites utilizing affected forms.

View analysis

critical

CVE-2026-93922

SiYuan up to version 3.8.4 fails to properly sanitize notebook names when rendering them within the Daily Note picker dialog. This vulnerability leads to stored cross-site scripting inside the application's Electron renderer context. Because the renderer possesses Node.js integration, the resulting JavaScript execution escalates into full operating system command execution on the host machine.

View analysis

critical

CVE-2026-93923

SiYuan up to version 3.8.4 contains a stored cross-site scripting vulnerability in its outline and bookmark dock HTML rendering. Attackers can inject malicious style values through crafted notebooks or administrative endpoints. This vulnerability matters because the application runs within an Electron renderer with full system access.

View analysis

critical

CVE-2026-82340

IBM Guardium Data Protection 12.2 contains an insecure deserialization and reflective method dispatch vulnerability in the Change Audit System listener. An unauthenticated network attacker reaching TCP port 16017 can submit crafted serialized messages. This issue matters because it can potentially lead to unintended code execution on the appliance.

View analysis