rootpwn

high · CVSS v3 8.9

CVE-2026-84070

IBM Guardium Data Protection 12.2 is vulnerable to remote code execution via improper input sanitization in web page generation. Attackers w

Overview

IBM Guardium Data Protection 12.2 is vulnerable to remote code execution via improper input sanitization in web page generation. Attackers who can authenticate to the system can exploit this flaw to run arbitrary code. This flaw could allow attackers to compromise the integrity, confidentiality, and availability of protected data.

Description

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

Impact

The vulnerability allows authenticated attackers to execute arbitrary code, compromising confidentiality, integrity, and availability of the protected data and the Guardium system itself. Defenders must consider that privileged users or compromised credentials could be used to exploit the flaw, potentially leading to full system compromise.

Remediation

Apply the latest security patch released by IBM for Guardium Data Protection 12.2 that addresses input sanitization in web page generation. If patching is not immediately possible, restrict web interface access to trusted networks, enforce least privilege for user accounts, and monitor for suspicious activity such as unexpected code execution or unauthorized configuration changes.

Risk context

Severity is high with CVSS v3 score 8.9. No EPSS data available. The flaw is exploitable by authenticated users, making it a significant risk for organizations running Guardium 12.2.

Affected products

  • IBM Guardium Data Protection 12.2

Scores

Severity
high
CVSS v2
8.7
CVSS v3
8.9
CVSS v4
—
EPSS
—

remote-code-execution input-sanitization web-application IBM Guardium high-severity

← All CVEs

Related CVEs

high

CVE-2026-93455

django-page-cms through version 2.0.13 contains an authorization bypass vulnerability in its admin helper views. The flaw allows low-privilege staff accounts to read unpublished drafts, page listings, and stored media paths without proper permission validation. This matters because it exposes sensitive organizational content to internal users who should not have access.

View analysis

high

CVE-2026-52727

The lxc-ci project inadvertently included a static pacman local-signing private key within Arch Linux container and virtual machine images built prior to May 28, 2026. This allows a malicious or compromised package mirror to issue cryptographically trusted packages to clients. Consequently, attackers can achieve arbitrary code execution as root on affected systems.

View analysis

high

CVE-2026-82892

IBM Guardium Data Protection 12.2 contains an OS command injection vulnerability. This flaw allows a remote attacker to execute arbitrary commands on the underlying system. It matters because successful exploitation could lead to full system compromise of sensitive database security monitoring infrastructure.

View analysis

high

CVE-2026-82893

IBM Guardium Data Protection 12.2 contains an improper privilege management vulnerability. This flaw allows a local user to escalate their privileges within the underlying operating environment. Addressing this issue is critical to maintaining strict access controls on database security appliances.

View analysis