CVE Intelligence
Analysis AI-assisted

CVE-2026-84064: IBM Guardium Data Protection: SQL injection

CVE-2026-84064 affects IBM Guardium Data Protection 12.2 and is classified as SQL injection (CWE-89). The record assigns a CVSS base score of 9.9 and describes a remote attacker with low-privilege authentication who could run arbitrary SQL commands. The sources consulted show no confirmed exploitation, and IBM's advisory is the primary reference for remediation.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-84064 is listed in the record as a multiple-vulnerability entry for IBM Guardium Data Protection. The description provided identifies one weakness: improper neutralization of special elements used in an SQL command, which corresponds to CWE-89 (SQL Injection). The record was published on 2026-09-18 and marked as Analyzed.

Impact

  • The description states that a remote attacker with authentication could execute arbitrary SQL commands.
  • The record's CVSS base score is 9.9 and its SSVC technical impact is listed as total.
  • The record does not describe the specific data or functions that could be reached through this flaw.

Affected products and versions

  • Product: IBM Guardium Data Protection.
  • Affected version listed in the record: 12.2.
  • The record does not list a fixed version. Consult the IBM advisory for the correct remediation level.

Exploitation status

  • The CISA KEV catalog entry for this CVE is not listed in the record, so no confirmed active exploitation can be stated from the KEV data.
  • No confirmed exploitation appears in the sources consulted.
  • The record's SSVC exploitation value is none and automatable is no. The EPSS probability is 0.00632 with a percentile of 0.49649, dated 2026-10-23.

Remediation and mitigation

  • Review the IBM support advisory, which the record lists as a patch reference.
  • Apply the vendor-provided patch or fix for the affected 12.2 deployments according to IBM's guidance.
  • Until patching is complete, restrict access to the product's management and query interfaces to trusted users and networks, and enforce least privilege on accounts that can authenticate.

Detection guidance

  • Review authentication logs and database query logs for unusual or malformed SQL statements originating from application or user sessions.
  • Monitor for unexpected access to sensitive data stores connected to the product.
  • Use the NVD entry and IBM advisory to confirm the affected builds in your environment.

Limitations of the available information

  • The record does not provide a fixed version number, so the patched build must be confirmed from IBM's advisory.
  • The record does not include the vector details beyond the score and the description, and it does not identify the specific SQL-accepting component.
  • No proof-of-concept or technical exploit details are included in the sources consulted, and this analysis does not provide any.

Frequently asked questions

What is CVE-2026-84064?

It is a SQL injection weakness (CWE-89) in IBM Guardium Data Protection 12.2, as described in the record. It could let a remote authenticated attacker run arbitrary SQL commands.

Is this vulnerability being actively exploited?

The record shows the CVE is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

How should organizations respond?

Review the IBM support advisory referenced in the record, apply the vendor patch for affected 12.2 deployments, and restrict access to the product's interfaces until remediation is complete.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.