OCTOBER 2, 2026
Live Feed
Back to database
Case File

CVE-2026-84436

CRITICAL · CVSS 9.1 EPSS 0.68%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-02

CyberRota Analysis

AI-Generated

IBM Guardium Data Protection 12.2 is susceptible to a command injection vulnerability in its certificate export command-line interface, enabling privileged authenticated users to execute arbitrary commands with root privileges. This critical flaw poses a significant risk to system integrity and data security. Organizations utilizing this version of IBM Guardium should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-84436
Severity
CRITICAL
CVSS
9.1
EPSS
0.68%

Original NVD Description

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.

Related CVEs

Other vulnerabilities affecting the same vendor(s)