[ CVE-2026-84436 · Published 29 Sep 2026 ]

Vulnerability in IBM Guardium Data Protection

CVSS 9.1 EPSS <1%Fix available

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.1

[ Description ]Official description

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.

[ Fixes ]Fixes and patches

  • Patch on ibm.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References