EUVD-2026-95243

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component due to improper privilege management (CWE-269). A low-privileged local user can exploit this flaw to gain root privileges , allowing for the unauthorized access or modification of sensitive...

CVE-2026-84245 IBM Guardium Data Protection Privilege Escalation

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

EUVD-2026-95242

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

CVE-2026-84250

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key within the pkcrypto passkey component. A local attacker could exploit this flaw to recover the root password , potentially leading to the acquisition of root privileges . No specific...

CVE-2026-84250 IBM Guardium Data Protection Hard-coded Credentials

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

EUVD-2026-95241

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

EUVD-2026-95240

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84271

IBM Guardium Data Protection 12.2 contains a signature verification bypass vulnerability within the patch installer. An attacker with local access could exploit this flaw to achieve arbitrary code execution with root privileges . The root cause is identified as a race condition (CWE-362). No spec...

CVE-2026-84271 IBM Guardium Data Protection Signature Verification Bypass

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84272 IBM Guardium Data Protection Missing Authentication

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters...

CVE-2026-84272 IBM Guardium Data Protection Missing Authentication

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters...

EUVD-2026-95239

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters...

CVE-2026-84272

IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to a missing authentication flaw in the edge-controller component. An unauthenticated remote attacker can exploit this to execute arbitrary container images and seize control of managed edge clusters . No specific exploitation d...

EUVD-2026-95237

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...

CVE-2026-84274 IBM Guardium Data Protection Information Disclosure

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...

CVE-2026-84274

The IBM Guardium Data Protection 12.2.2 version is affected by a sensitive information exposure vulnerability (CWE-200 ). During SECRET and API_KEY rotation processing, the edge-controller and edge-manager components log sensitive credential material at the INFO level. An authenticated attacker w...

CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...