CVE-2026-82892: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Published Sep 17, 2026
·Updated
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Affected Software
3 affected components
IBM Guardium Data Protection=12.2
IBM Guardium Data Protection<=12.1
IBM Guardium Data Protection<=12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch SqlGuard_12.0p233_FixPack
Event History
Sep 17, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 18, 2026
CVE Published
via MITRE·07:32 PM
Data Sourced
via MITRE·07:32 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What access or prerequisites does an attacker need?
The available information identifies the attacker as remote. It does not state whether authentication, existing privileges, or user interaction are required.
2
Can affected versions or configurations be identified from the available information?
No affected versions or configuration conditions are provided. The referenced IBM support advisory is the available source for product-specific scope and remediation details.