EUVD-2026-83441

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84086

CVE-2026-84086 affects IBM Guardium Data Protection 12.2 and is a path traversal vulnerability (CWE-22) caused by improper limitation of a pathname to a restricted directory. A remote authenticated attacker with high privileges can exploit this to execute arbitrary code , resulting in high impact...

EUVD-2026-83440

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

CVE-2026-84086 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

CVE-2026-52745

CordysCRM , an open-source AI-powered CRM supporting private deployment, is vulnerable to a time-based blind SQL injection in the POST /account-pool/page endpoint prior to version 1.7.0 . An authenticated user holding the MODULE_SETTING:UPDATE permission can craft a sort.name value that is inject...

EUVD-2026-83438

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84085 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84085

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection due to improper neutralization of special elements in OS commands, allowing a remote attacker to execute arbitrary OS commands. The CVSS v3.1 score is 8.1 (HIGH) with a network attack vector, high complexity, no privileges re...

EUVD-2026-83437

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery CSRF vulnerability...

CVE-2026-84084

IBM Guardium Data Protection 12.2 is vulnerable to cross-site request forgery (CSRF) (CWE-352), allowing a remote unauthenticated attacker to bypass security restrictions when a user interacts with a crafted request. The CVSS 3.1 score is 8.8 (High) with impacts to confidentiality, integrity, and...

EUVD-2026-83436

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmapwrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands...

CVE-2026-84083 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmapwrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. The root cause is insufficient argument validation in the SUID binary, allowing a local attacker with low-privileged access to execute arbitrary comman...

EUVD-2026-83435

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84082

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, with full impact on confidentiality, integrit...

CVE-2026-84082 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84081 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...

EUVD-2026-83432

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...

CVE-2026-84081

IBM Guardium Data Protection 12.2 is affected by a vulnerability caused by improper certificate validation , which could allow a remote attacker to bypass security restrictions. The attack requires no prior authentication or user interaction but carries high complexity , as indicated by the CVSS ...

CVE-2026-84078

IBM Guardium Data Protection 12.2 contains a missing authentication flaw (CWE-306) in the LoadBalancerServlet , rated CVSS 9.9 (CRITICAL) . An unauthenticated remote attacker can access privileged load-balancer operations, potentially performing unauthorized actions that impact the integrity and ...