Patch Forecast
Amber warning
Patch this week.

CVE-2026-82344

Ibm Guardium Data Protection: memory corruption can lead to remote code execution

Risk score
70/100
CVSS
9.8 v3.1
Exploit chance (30 days)
0.4%
Published
8 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary…
Affected
Ibm Guardium Data Protection
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Story map

Story map: Ibm Guardium Data ProtectionTHE FLAWSTHE FIXCVE-2026-82344Memory corruption can lead toremote code executionCVSS 9.8 · EPSS 0%CVE-2026-75875Path traversal can lead toremote code executionCVSS 9.8 · EPSS 1%CVE-2026-84249Missing authenticationCVSS 9.8 · EPSS 0%CVE-2026-84272Missing authenticationCVSS 9.8 · EPSS 0%FixApply the vendor's securityupdate; see the linked advisory.Who is exposedIbm Guardium Data ProtectionAMBER · PATCH THIS WEEKIbm GuardiumData ProtectionIBM Guardium Data Protection12.0, 12.1, and 12.2 could allow aremote attacker to executearbitrary code due to pathtraversal.Where it standsNo known exploitationCONNECTS TOSame weaknessMemory corruption (CWE-119)272 other warnings in 30 days →Same productEarlier Ibm Guardium Data Protection warnings37 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Ibm Guardium Data Protection: Amber, patch this week. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.

The flaws

  • CVE-2026-82344: Memory corruption can lead to remote code execution (CVSS 9.8 · EPSS 0%)
  • CVE-2026-75875: Path traversal can lead to remote code execution (CVSS 9.8 · EPSS 1%)
  • CVE-2026-84249: Missing authentication (CVSS 9.8 · EPSS 0%)
  • CVE-2026-84272: Missing authentication (CVSS 9.8 · EPSS 0%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Ibm Guardium Data Protection

Where it stands

  • No known exploitation

Connects to

Why it is Amber

  • CVSS 9.8 critical
  • Remotely exploitable without logging in

References

Original description

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.

Last activity 8 Oct 2026. Patch Forecast updates every hour.