CVE-2026-84272: IBM Guardium Data Protection Missing Authentication in Edge Controller
CVE-2026-84272 is a critical missing authentication vulnerability (CWE-306) in the edge-controller component of IBM Guardium Data Protection 12.1 and 12.2.2, with a CVSS base score of 9.8 reported by the vendor. According to the record, an unauthenticated remote attacker could execute arbitrary container images and gain control of managed edge clusters. The record shows no KEV listing and no confirmed exploitation in the sources consulted, and no fixed version is listed in the record, so administrators should check the vendor advisory directly.
Overview
CVE-2026-84272 affects the edge-controller component of IBM Guardium Data Protection versions 12.1 and 12.2.2. The weakness is classified as missing authentication for a critical function (CWE-306). IBM's advisory is the primary vendor reference listed in the record.
Impact
- The record describes an unauthenticated remote attacker able to execute arbitrary container images.
- The described consequence is control over managed edge clusters.
- The vendor-reported CVSS base score is 9.8, with high confidentiality, integrity and availability impact as scored by the CNA.
- SSVC data in the record marks the vulnerability as automatable with total technical impact.
Affected products and versions
- IBM Guardium Data Protection version 12.1.
- IBM Guardium Data Protection version 12.2.2.
The record lists no fixed versions. A missing fixed version in the record does not mean no fix exists; check the vendor advisory for remediation details.
Exploitation status
The record does not list this CVE in CISA KEV. No confirmed exploitation appears in the sources consulted. The SSVC exploitation field is set to none and the EPSS probability is 0.00401 (percentile 0.33249, dated 2026-10-23). These values are estimates and do not confirm exploitation.
Remediation and mitigation
- Identify all Guardium Data Protection deployments and confirm whether they run the affected versions.
- Review the IBM support advisory linked in the references for the vendor's fix or interim guidance.
- Restrict network access to edge-controller interfaces to trusted management networks while remediation is planned.
- Review the authentication and access configuration of managed edge clusters.
Detection guidance
- Review logs for unexpected or unauthenticated requests to the edge-controller component.
- Monitor managed edge clusters for unfamiliar container workloads or configuration changes.
- Correlate these signals with asset inventory to identify affected hosts quickly.
Limitations of the available information
The record does not provide fixed versions, vendor-supplied workarounds, technical details of the flaw, or exploitation telemetry. The affected version list comes from the record and should be confirmed against the IBM advisory.
Frequently asked questions
What is CVE-2026-84272?
It is a critical missing authentication vulnerability (CWE-306) in the edge-controller component of IBM Guardium Data Protection 12.1 and 12.2.2, with a vendor-reported CVSS base score of 9.8.
Is this vulnerability known to be exploited?
The record does not list it in CISA KEV, and no confirmed exploitation appears in the sources consulted.
Which versions are affected?
The record lists IBM Guardium Data Protection 12.1 and 12.2.2. It lists no fixed versions, so check the IBM advisory for remediation details.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.