OCTOBER 10, 2026
Live Feed
Back to database
Case File

CVE-2026-81656

HIGH · CVSS 8.8 EPSS 0.44%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-10

CyberRota Analysis

AI-Generated

IBM Guardium Data Protection 12.2 is susceptible to a SQL injection vulnerability in the New Query Builder REST Processor, allowing low-privileged authenticated users to execute arbitrary SQL statements. This could lead to unauthorized access to sensitive data, compromising the confidentiality, integrity, and availability of the system. Organizations using this version of Guardium should prioritize patching to mitigate potential data breaches and system disruptions.

CVE
CVE-2026-81656
Severity
HIGH
CVSS
8.8
EPSS
0.44%

Original NVD Description

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.

Related CVEs

Other vulnerabilities affecting the same vendor(s)