CVE-2026-84842: Path Traversal

Q: What level of access does an attacker need to exploit this issue?

The attacker must be authenticated and able to reach the Datasource REST component remotely.

Q: What is the practical impact of successful exploitation?

An attacker could delete files through path traversal, which could cause denial of service and potentially affect system integrity.

Published Sep 17, 2026

Updated

IBM Security Guardium Data Protection is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2

Event History

Sep 17, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288035

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be authenticated and able to reach the Datasource REST component remotely.

What is the practical impact of successful exploitation?

An attacker could delete files through path traversal, which could cause denial of service and potentially affect system integrity.