CVE-2026-82885

Summary

The flaw allows a remote authenticated attacker to gain elevated privileges via the REST API due to missing authorization checks, posing a significant security risk.

Exploitability

Exploitation requires a valid login and access to the REST API, making it moderately difficult to exploit.

Blast radius

If exploited, the attacker could gain full control over the system, leading to potential data breaches and system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.