CVE-2026-84436: ibm guardium_data_protection

CVSS 9.1 (critical) · published 2026-09-29

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.

Affected products (NVD): ibm guardium_data_protection

Weakness: CWE-78

Source: NVD CVE-2026-84436

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.