AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-84862

IBM Guardium Data Protection: unsafe deserialization

IBM

CVE-2026-84862 · Published Sep 25, 2026 · updated Sep 28, 2026

High7.2
No fix yet
IBM advisory

IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system.

Affected versions

PackageAffectedFixed in
Guardium Data Protection
Product
<= 12.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More IBM advisories

All IBM
High 7.5Sep 25IBM Guardium Data Protection: path traversalCVE-2026-84882no fix yetMedium 6.5Sep 25IBM Financial Transaction Manager for Redhat OpenShift: information disclosureCVE-2026-93030no fix yetHigh 7.1Sep 25IBM Server Firmware: memory corruptionCVE-2026-93306no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: information disclosureCVE-2026-85029no fix yetHigh 8.8Sep 25IBM Guardium Data Protection: command injectionCVE-2026-85542no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: plaintext password storageCVE-2026-84884no fix yet