CVE-2026-84032: IBM Guardium Data Protection is affected by multiple vulnerabilities

Q: What must an attacker be able to do to exploit this issue?

The attacker must be able to position themselves to conduct a man-in-the-middle attack against affected IBM Guardium Data Protection communications. The vulnerability is remotely exploitable and does not require privileges or user interaction, but the attack complexity is rated high.

Q: Which version is identified as affected?

IBM Guardium Data Protection 12.2.2 is identified as affected.

Q: What security impact could a successful attack have?

A successful man-in-the-middle attack could compromise confidentiality, integrity, and availability to a low extent.

Published Sep 21, 2026

Updated

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

Other sources

IBM Guardium Data Protection could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Fixed in 12.2.3

Event History

Sep 21, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 8, 2026

CVE Published

via MITRE·09:29 PM

Data Sourced

via MITRE·09:29 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288627

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

The attacker must be able to position themselves to conduct a man-in-the-middle attack against affected IBM Guardium Data Protection communications. The vulnerability is remotely exploitable and does not require privileges or user interaction, but the attack complexity is rated high.

Which version is identified as affected?

IBM Guardium Data Protection 12.2.2 is identified as affected.

What security impact could a successful attack have?

A successful man-in-the-middle attack could compromise confidentiality, integrity, and availability to a low extent.

CVE-2026-84032: IBM Guardium Data Protection is affected by multiple vulnerabilities

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

Which version is identified as affected?

What security impact could a successful attack have?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

Which version is identified as affected?

What security impact could a successful attack have?