CVE-2026-84276

Summary

IBM Guardium Data Protection's edge-controller service is vulnerable to a denial-of-service attack that occurs when malformed task data triggers an unchecked type assertion, causing the process to crash and terminate unexpectedly. This vulnerability affects unauthenticated remote attackers who can access the gRPC service, potentially disrupting data protection operations.

Exploitability

Exploitation is relatively straightforward as it requires only network access to the edge-controller gRPC service with no authentication needed, though it may require crafting specific malformed task data payloads to trigger the unchecked type assertion.

Blast radius

If exploited, this vulnerability could cause the edge-controller process to crash repeatedly, leading to service disruption and potential loss of data protection monitoring capabilities across the Guardium deployment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.3 or later to address this denial-of-service vulnerability in the edge-controller component.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.