cyfenced.com →

[ CVE-2026-84058 · Published 8 Oct 2026 ]

Vulnerability in IBM Guardium Data Protection

CVSS 9.8 EPSS <1%1 agency advisoryFix available

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.8

[ Description ]Official description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

[ Fixes ]Fixes and patches

  • Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ Advisories ]Government CERT advisories

[ References ]References