CVE-2026-84057: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
Other sources
IBM Guardium Data Protection could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protection Edgeto a version that resolves this vulnerability.Patch 12.0p15004 - Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch 12.0p147
Event History
Frequently Asked Questions
Does the available information identify authentication or other access prerequisites for exploitation?
No. The available information only states that the attacker can be remote; it does not specify whether authentication, a particular role, or access to a specific interface is required.
Does the available information provide affected versions or a workaround for systems that cannot be patched immediately?
No. It identifies IBM Guardium Data Protection but does not list affected or fixed versions, configuration mitigations, or other compensating controls.