rootpwn

high · CVSS v3 8.9

CVE-2026-84106

IBM Guardium Data Protection 12.2 is vulnerable to remote authenticated code execution due to improper input neutralization in web page gene

Overview

IBM Guardium Data Protection 12.2 is vulnerable to remote authenticated code execution due to improper input neutralization in web page generation. Attackers who can authenticate to the Guardium web interface can run arbitrary code on the host. This flaw can compromise the confidentiality, integrity, and availability of protected data.

Description

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.

Impact

The vulnerability allows attackers to execute code on Guardium servers, potentially exposing sensitive data, modifying database configurations, and disrupting service availability. Database administrators, security teams, and compliance officers are directly impacted as they rely on Guardium to protect critical data assets.

Remediation

Apply the latest IBM Guardium patch or upgrade to a version where the input sanitization issue is fixed. Restrict web UI access to trusted IP ranges and enforce least privilege for Guardium accounts. Enable logging and monitor for anomalous web requests, and consider disabling the vulnerable web interface if not required.

Risk context

The CVSS v3 score of 8.9 indicates a high severity flaw with significant potential impact. Defenders should treat this as a priority patching issue.

Affected products

  • IBM Guardium Data Protection 12.2

Scores

Severity
high
CVSS v2
8.7
CVSS v3
8.9
CVSS v4
—
EPSS
—

IBM Guardium RemoteCodeExecution WebInput HighSeverity DataProtection Authentication

← All CVEs

Related CVEs

high

CVE-2026-93455

django-page-cms through version 2.0.13 contains an authorization bypass vulnerability in its admin helper views. The flaw allows low-privilege staff accounts to read unpublished drafts, page listings, and stored media paths without proper permission validation. This matters because it exposes sensitive organizational content to internal users who should not have access.

View analysis

high

CVE-2026-52727

The lxc-ci project inadvertently included a static pacman local-signing private key within Arch Linux container and virtual machine images built prior to May 28, 2026. This allows a malicious or compromised package mirror to issue cryptographically trusted packages to clients. Consequently, attackers can achieve arbitrary code execution as root on affected systems.

View analysis

high

CVE-2026-84108

IBM Guardium Data Protection 12.2 is vulnerable to remote code execution due to improper input neutralization during web page generation. Attackers can exploit this flaw to run arbitrary code on the affected system. The vulnerability poses a significant risk to data protection environments.

View analysis

high

CVE-2026-84239

IBM Guardium Data Protection 12.2 contains an SQL injection flaw that can be exploited by authenticated users to retrieve sensitive data. The vulnerability arises from improper neutralization of special characters in SQL commands. It allows attackers to read confidential information stored in the system.

View analysis