CVE-2026-84422: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Published Sep 29, 2026
·Updated
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.
Affected Software
4 affected components
All of the following
IBM Guardium Data Protection=12.2
Linux Linux kernel
IBM Guardium Data Protection<=12.1
IBM Guardium Data Protection<=12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch SqlGuard_12.0p233_FixPack
Event History
Sep 29, 2026
CVE Published
via MITRE·05:55 PM
Data Sourced
via MITRE·05:55 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 14, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires an authenticated CLI user with privileged access. The issue is in the certificate SMIME recipient deletion functionality.
2
What level of access could successful exploitation provide?
A successful attacker could execute arbitrary commands with root privileges.