CVE Intelligence
Analysis AI-assisted

CVE-2026-84075: IBM Guardium Data Protection: missing authentication enables security bypass

IBM has published a record for CVE-2026-84075 affecting IBM Guardium Data Protection 12.2. The description states that a remote attacker could bypass security restrictions because the ChangeTrackerServlet lacks authentication. The record assigns a CVSS base score of 9.9 and links to an IBM patch, but it does not state a fixed version.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-84075 describes missing authentication for the ChangeTrackerServlet in IBM Guardium Data Protection 12.2. The record classifies the weakness as CWE-306, Missing Authentication for Critical Function.

Impact

  • The description states that a remote attacker could bypass security restrictions.
  • The record gives a CVSS base score of 9.9 and a vector indicating network reachability, no privileges required and no user interaction.
  • The record does not describe the specific data or functions exposed through the servlet, so the full impact is unknown.

Affected products and versions

  • IBM Guardium Data Protection 12.2 is the only affected version listed in the record.
  • The record does not state a fixed version. It references an IBM support page describing a patch.

Exploitation status

  • The record does not list this CVE in the CISA Known Exploited Vulnerabilities catalog.
  • No confirmed exploitation appears in the sources consulted.
  • The EPSS probability is 0.00559 and the SSVC exploitation value is none, which are indicators from the record and not evidence of exploitation.

Remediation and mitigation

  • Review the IBM advisory and apply the patch referenced for Guardium Data Protection 12.2 as soon as it is validated in your environment.
  • Confirm the fixed build in the IBM advisory, since the record does not state it.
  • Until patched, limit network access to Guardium management and servlet endpoints to trusted administrative networks. This is general hardening guidance and not a vendor recommendation.
  • Inventory all Guardium Data Protection 12.2 deployments so that patching can be tracked.

Detection guidance

  • Review web server and application logs for requests to the ChangeTrackerServlet that come from unexpected sources or without expected authentication context.
  • Alert on unusual administrative activity in Guardium after exposure of the service is detected.

Limitations of the available information

  • The record title refers to multiple vulnerabilities, but the description covers only the ChangeTrackerServlet authentication issue.
  • The fixed version, patch details and technical specifics of the flaw are not present in the record.
  • Exploitation status beyond the KEV and SSVC fields is unknown.

Frequently asked questions

What is the core weakness in CVE-2026-84075?

The record classifies it as CWE-306, missing authentication for a critical function, in the ChangeTrackerServlet of IBM Guardium Data Protection 12.2.

Is this CVE known to be actively exploited?

The record shows it is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

Which version is affected and is a fix available?

The record lists IBM Guardium Data Protection 12.2 and references an IBM patch page. It does not state the fixed version, so check the IBM advisory.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.