CVE-2026-75875: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
Published Oct 8, 2026
·Updated
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
Other sources
IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal.
— IBM
Affected Software
1 affected component
IBM Guardium Data Protection<=12.2, 12.1, 12.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protection Snifferto a version that resolves this vulnerability.Patch SqlGuard_12.0p4018_SnifferUpdate
Event History
Oct 8, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
CVE Published
via MITRE·09:29 PM
Data Sourced
via MITRE·09:29 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require local access?
No. The available information describes the issue as exploitable by a remote attacker.
2
Are affected versions, fixed versions, or configuration prerequisites identified?
No. The provided information identifies IBM Guardium Data Protection but does not specify versions, fixed releases, or configuration conditions.