CVE-2026-84278: IBM Guardium Data Protection Command Injection
Published Sep 17, 2026
·Updated
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.
Affected Software
3 affected components
IBM Guardium Data Protection=12.2
IBM Guardium Data Protection<=12.1
IBM Guardium Data Protection<=12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch SqlGuard_12.0p233_FixPack
Event History
Sep 17, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Oct 8, 2026
CVE Published
via MITRE·06:58 PM
Data Sourced
via MITRE·06:58 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:20 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this vulnerability?
Exploitation requires an authenticated, high-privileged user of IBM Guardium Data Protection. The vulnerable component is the SUID-root ssh_config_wrapper.
2
What level of access can successful exploitation provide?
An attacker who can inject commands through attacker-controlled arguments can execute arbitrary commands with root privileges.