CVE-2026-84209

Summary

IBM Guardium Data Protection is vulnerable to SQL injection attacks that allow remote attackers to execute arbitrary SQL commands. This flaw occurs when user input is not properly sanitized before being included in SQL queries, potentially leading to unauthorized database access and data manipulation.

Exploitability

Exploitation requires a remote connection to the Guardium system with minimal preconditions, as the vulnerability affects the SQL command processing without requiring authentication or specific user privileges.

Blast radius

If exploited, this vulnerability could allow attackers to gain full database access, potentially leading to data exfiltration, modification of sensitive information, and unauthorized access to protected data assets across the organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.3 or later to remediate this SQL injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.