CVE-2026-84057: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protection Edgeto a version that resolves this vulnerability.Patch SqlGuard_12.0p15004_Edge - Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch SqlGuard_12.0p147_FixPack
Event History
Frequently Asked Questions
Does the available information identify authentication or other access prerequisites for exploitation?
No. The available information only states that the attacker can be remote; it does not specify whether authentication, a particular role, or access to a specific interface is required.
Does the available information provide affected versions or a workaround for systems that cannot be patched immediately?
No. It identifies IBM Guardium Data Protection but does not list affected or fixed versions, configuration mitigations, or other compensating controls.