CVE-2026-84246: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
Published Oct 8, 2026
·Updated
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
Other sources
IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to a buffer overflow.
— IBM
Affected Software
2 affected components
IBM Guardium Data Protection<=12.2, 12.1, 12.0
IBM Guardium Data Protection>=12.0<=12.2
Remediation
Information
For all affected versions, IBM strongly recommends addressing these vulnerabilities now by applying the latest IBM Guardium Data Protection Sniffer patch:
https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=All&function=fixId&fixids=SqlGuard_12.0p4018_SnifferUpdate&includeSupersedes=0&source=fc
Patch Available
Event History
Oct 8, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
CVE Published
via MITRE·09:28 PM
Data Sourced
via MITRE·09:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
RemedyDescriptionSeverityWeaknessAffected Software