CVE-2026-107726 Hazelcast: Arbitrary member memory access by low-privileged client

Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, an...

CVE-2026-75875 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

CVE-2026-75875

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a path traversal vulnerability (CWE-22) within the Sniffer component . This flaw could allow a remote attacker to execute arbitrary code . To remediate this, IBM strongly recommends applying the latest Sniffer patch (fix...

CVE-2026-75875 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

CVE-2026-80381 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

CVE-2026-82895 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

CVE-2026-82895

The Sniffer component of IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 is vulnerable to a buffer overflow (CWE-120). This flaw could allow a remote attacker to execute arbitrary code by sending specially crafted data, potentially leading to memory corruption. To remediate this vulner...

CVE-2026-82900

IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to a remote attack that allows for the deletion of arbitrary files . This issue is caused by the improper limitation of a pathname to a restricted directory (CWE-22). While the vulnerability poses a risk to data integrity and av...

CVE-2026-82900 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-81932 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-81932

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to SQL injection within the Sniffer component . A remote unauthenticated attacker can send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. IBM recommends applying the l...

CVE-2026-84032 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation...

CVE-2026-84032 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation...

CVE-2026-84032

IBM Guardium Data Protection version 12.2.2 is vulnerable to a man-in-the-middle attack. The root cause is improper certificate validation (CWE-295), which could allow a remote attacker to intercept communications. To remediate this vulnerability, IBM encourages customers to update their systems ...

CVE-2026-84035

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a stack-based buffer overflow in the Sniffer component . This vulnerability could allow a remote attacker to execute arbitrary code by overwriting adjacent memory when the program writes more data to a buffer on the stac...

CVE-2026-84035 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84057

IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to an OS command injection vulnerability (CWE-78 ) due to the improper neutralization of special elements used in an OS command. A remote attacker can exploit this flaw to execute arbitrary commands. The vulnerability affects th...