What’s Vulnerable › Vulnerabilities
CVE-2026-84440: IBM Guardium Data Protection is affected by multiple vulnerabilities.
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-29 · updated 2026-10-01
- Weakness: CWE-78
Description
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.
Affected products
References
Get alerted when CVE-2026-84440 or the next vulnerability affects your stack