CVE-2026-84071: falha de alta gravidade em IBM Guardium Data Protection
IBM Guardium Data Protection is affected by multiple vulnerabilities.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.5%
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · Guardium Data ProtectionCVEs relacionadas — IBM Guardium Data Protection
No mesmo produto, das mais perigosas para as menos.
CVE-2026-85542HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 3.0%CVE-2026-84278HIGHIBM Guardium Data Protection Command InjectionEPSS 2.5%CVE-2026-81937HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.5%CVE-2026-81669HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 1.3%CVE-2026-84086HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.9%CVE-2026-81657CRITICALIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.8%