What’s Vulnerable › Vulnerabilities

CVE-2026-84209: IBM Guardium Data Protection is affected by multiple vulnerabilities.

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-08 · updated 2026-10-15
• Weakness: CWE-89

Description

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

Affected products

• IBM Guardium Data Protection: 12.1, 12.2.2

References

• https://www.ibm.com/support/pages/node/7288832

Get alerted when CVE-2026-84209 or the next vulnerability affects your stack