CVE-2026-85542: high-severity vulnerability in IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 3.0%
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
IBM · Guardium Data ProtectionRelated CVEs — IBM Guardium Data Protection
In the same product, most dangerous first.
CVE-2026-84278HIGHIBM Guardium Data Protection Command InjectionEPSS 2.5%CVE-2026-84071HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.5%CVE-2026-81937HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.5%CVE-2026-81669HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.3%CVE-2026-84086HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.9%CVE-2026-81657CRITICALIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.8%