CVE-2026-84057

Summary

IBM Guardium Data Protection is vulnerable to command injection in OS commands due to improper neutralization of special characters, allowing remote attackers to execute arbitrary code with high privileges.

Exploitability

Exploitation requires a remote attacker with network access to the Guardium system, and is moderately difficult due to the need for crafting malicious input that bypasses command sanitization while maintaining valid command syntax.

Blast radius

If exploited, attackers could gain full control over the Guardium server, potentially accessing sensitive data protection functions and compromising the entire data security infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.3 or later to remediate this command injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.