CVE-2026-84275: IBM Guardium Data Protection Path Traversal

Q: What access does an attacker need to exploit this issue?

The vulnerability can be exploited by an unauthenticated attacker through the GIM file-upload functionality.

Q: Which system component is at risk?

The affected target is the Collector, where an attacker could write arbitrary files.

Published Sep 17, 2026

Updated

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.

Other sources

IBM Security Guardium Data Protection is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.

— IBM

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Guardium Data Protection to a version that resolves this vulnerability.
Patch SqlGuard_12.0p233_FixPack

Event History

Sep 17, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Oct 8, 2026

CVE Published

via MITRE·07:03 PM

Data Sourced

via MITRE·07:03 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288035

Frequently Asked Questions

What access does an attacker need to exploit this issue?