CVE-2026-84271: IBM Guardium Data Protection Signature Verification Bypass

Q: Who can exploit this vulnerability?

An attacker needs local access to the IBM Guardium Data Protection system. Successful exploitation can result in arbitrary code execution with root privileges.

Q: Which component is affected?

The vulnerability is in the patch installer’s signature verification process.

Published Sep 17, 2026

Updated

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.

Other sources

IBM Security Guardium Data Protection is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Patch SqlGuard_12.0p233_FixPack

Event History

Sep 17, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 8, 2026

CVE Published

via MITRE·07:06 PM

Data Sourced

via MITRE·07:06 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288035

Frequently Asked Questions

Who can exploit this vulnerability?