CVE-2026-82891: IBM Guardium Data Protection is affected by a security vulnerability

Q: Does an attacker need credentials or user interaction to exploit this issue?

No. The CVSS vector indicates no privileges are required and no user interaction is needed; exploitation is possible remotely over the network. The attack complexity is rated high.

Q: Which deployments should be prioritized for investigation and remediation?

IBM Guardium Data Protection versions 12.1 and 12.2 are identified as affected. Prioritize instances that are reachable by remote attackers because the reported issue involves a hard-coded cryptographic key and exposure of sensitive information.

Published Oct 19, 2026

Updated

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.

Other sources

IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.

— IBM

Affected Software

3 affected components

IBM Guardium Data Protection=12.1, =12.2

IBM Guardium Data Protection<=12.1

IBM Guardium Data Protection<=12.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection 12.1 to a version that resolves this vulnerability.
Patch SqlGuard_12.0p150_Bundle
Upgrade
Upgrade IBM Guardium Data Protection 12.2 to a version that resolves this vulnerability.
Patch SqlGuard_12.0p233_FixPack

Event History

Oct 19, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 20, 2026

CVE Published

via MITRE·09:55 PM

Data Sourced

via MITRE·09:55 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7293014

Frequently Asked Questions

Does an attacker need credentials or user interaction to exploit this issue?

No. The CVSS vector indicates no privileges are required and no user interaction is needed; exploitation is possible remotely over the network. The attack complexity is rated high.

Which deployments should be prioritized for investigation and remediation?

IBM Guardium Data Protection versions 12.1 and 12.2 are identified as affected. Prioritize instances that are reachable by remote attackers because the reported issue involves a hard-coded cryptographic key and exposure of sensitive information.

CVE-2026-82891: IBM Guardium Data Protection is affected by a security vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Does an attacker need credentials or user interaction to exploit this issue?

Which deployments should be prioritized for investigation and remediation?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need credentials or user interaction to exploit this issue?

Which deployments should be prioritized for investigation and remediation?