CVE-2026-84842: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Published Sep 17, 2026
·Updated
IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.
Affected Software
4 affected components
All of the following
IBM Guardium Data Protection=12.2
Linux Linux kernel
IBM Guardium Data Protection<=12.1
IBM Guardium Data Protection<=12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Patch SqlGuard_12.0p233_FixPack
Event History
Sep 17, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Sep 29, 2026
CVE Published
via MITRE·05:48 PM
Data Sourced
via MITRE·05:48 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated and able to reach the Datasource REST component remotely.
2
What is the practical impact of successful exploitation?
An attacker could delete files through path traversal, which could cause denial of service and potentially affect system integrity.