CVE-2026-84271: IBM Guardium Data Protection Signature Verification Bypass
Published Sep 17, 2026
·Updated
IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.
Affected Software
3 affected components
IBM Guardium Data Protection=12.2
IBM Guardium Data Protection<=12.1
IBM Guardium Data Protection<=12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch SqlGuard_12.0p233_FixPack
Event History
Sep 17, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Oct 8, 2026
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker needs local access to the IBM Guardium Data Protection system. Successful exploitation can result in arbitrary code execution with root privileges.
2
Which component is affected?
The vulnerability is in the patch installer’s signature verification process.