AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-85029

IBM Guardium Data Protection: information disclosure

IBM

CVE-2026-85029 · Published Sep 25, 2026 · updated Sep 28, 2026

High7.5
No fix yet
IBM advisory

IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory.

Affected versions

PackageAffectedFixed in
Guardium Data Protection
Product
<= 12.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More IBM advisories

All IBM
High 7.2Sep 25IBM Guardium Data Protection: unsafe deserializationCVE-2026-84862no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: path traversalCVE-2026-84882no fix yetMedium 6.5Sep 25IBM Financial Transaction Manager for Redhat OpenShift: information disclosureCVE-2026-93030no fix yetHigh 7.1Sep 25IBM Server Firmware: memory corruptionCVE-2026-93306no fix yetHigh 8.8Sep 25IBM Guardium Data Protection: command injectionCVE-2026-85542no fix yetHigh 7.5Sep 25IBM Guardium Data Protection: plaintext password storageCVE-2026-84884no fix yet