Findings

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used i…

Published Oct 8, 2026 · updated Oct 15, 2026 · ibm guardium data protection

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 8, 2026 · NIST NVD

    Detected

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

  2. Oct 15, 2026 · NIST NVD

    Updated

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

Affected

  • cpe ibm/guardium data protection12.1
  • cpe ibm/guardium data protection12.2.2

Sources

  • CVE.orgCVE-2026-84209

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-84209

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDCVE-2026-84209

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

    nvd.nist.gov

References

CVE-2026-84209 · ZeroDay Findings