CVE-2026-84440
HighCVSS 7.5Summary
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as OS commands by the SNMP alerter service, which runs with root privileges.
Risk Assessment
An attacker could execute arbitrary commands with root privileges, leading to full system compromise.
Recommendation
Apply patches provided by IBM for Guardium Data Protection 12.2 to fix this vulnerability.
Other vulnerabilities in IBM Guardium Data Protection
See all- CVE-2026-84842High
IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this to delete files, potentially causing denial of service or impacting system integrity.
- CVE-2026-84422High
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.
- CVE-2026-84893High
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.
- CVE-2026-84436Critical
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality. A privileged authenticated CLI user can execute arbitrary commands with root privileges.
- CVE-2026-84082Critical
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
- CVE-2026-84078Critical
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected system.
- CVE-2026-84075Critical
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.
- CVE-2026-84073Critical
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
- CVE-2026-84064Critical
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
- CVE-2026-84031Critical
IBM Guardium Data Protection 12.2 contains a cross-site scripting vulnerability due to improper neutralization of input during web page generation. A remote authenticated attacker could exploit this flaw to execute arbitrary code.
Original NVD description (English source)
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS