CVE-2026-84893: SQL Injection

Q: What level of access does an attacker need to exploit this issue?

The attacker must be authenticated to the PESI service. The available information does not indicate that unauthenticated access can exploit the vulnerability.

Q: What could an attacker obtain through successful exploitation?

Successful SQL injection could allow an authenticated attacker to access sensitive information stored in the internal database.

Published Sep 17, 2026

Updated

IBM Security Guardium Data Protection is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.

Affected Software

1 affected component

IBM Guardium Data Protection<=12.2

Event History

Sep 17, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7288035

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must be authenticated to the PESI service. The available information does not indicate that unauthenticated access can exploit the vulnerability.

What could an attacker obtain through successful exploitation?

Successful SQL injection could allow an authenticated attacker to access sensitive information stored in the internal database.