AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-80442

IBM Guardium Data Protection: command injection

IBM

CVE-2026-80442 · Published Sep 18, 2026 · updated Oct 6, 2026

Critical9.9
No fix yet
IBM advisory

IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow an attacker to execute unauthorized commands and impact the confidentiality, integrity, and availability of the affected system.

Affected versions

PackageAffectedFixed in
Guardium Data Protection
Product
<= 12.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More IBM advisories

All IBM
High 8.1Sep 18IBM Guardium Data Protection: improper authorizationCVE-2026-84241no fix yetHigh 8.8Sep 18IBM Guardium Data Protection: cross-site request forgeryCVE-2026-84084no fix yetHigh 8.1Sep 18IBM Guardium Data Protection: command injectionCVE-2026-84085no fix yetHigh 7.2Sep 18IBM Guardium Data Protection: remote code executionCVE-2026-84086no fix yetHigh 7.8Sep 18IBM Guardium Data Protection: privilege escalationCVE-2026-84089no fix yetHigh 7.7Sep 18IBM Guardium Data Protection: information disclosureCVE-2026-84105no fix yet