CVE-2026-81937: falha de alta gravidade em IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.5%
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root privileges and impact to the confidentiality, integrity, and availability of the affected system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · Guardium Data ProtectionCVEs relacionadas — IBM Guardium Data Protection
No mesmo produto, das mais perigosas para as menos.
CVE-2026-85542HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 3.0%CVE-2026-84278HIGHIBM Guardium Data Protection Command InjectionEPSS 2.5%CVE-2026-84071HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.5%CVE-2026-81669HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.3%CVE-2026-84086HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.9%CVE-2026-81657CRITICALIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.8%