CVE-2026-81623: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.
Other sources
IBM Security Guardium could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protection 12.2to a version that resolves this vulnerability.Patch SqlGuard_12.0p233_FixPack
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to IBM Guardium Data Protection. The available information does not indicate that unauthenticated exploitation is possible.
What privileges could an attacker gain through exploitation?
An authenticated user could execute arbitrary commands with low user privileges on the affected system. The provided information does not state that administrative or root-level execution is obtained.