CVE-2026-84058: ibm guardium_data_protection

CVSS 9.8 (critical) · published 2026-10-08

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

Affected products (NVD): ibm guardium_data_protection

Weakness: CWE-119

Source: NVD CVE-2026-84058

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.