CVE-2026-84422

Ibm Guardium Data Protection: OS command injection

Risk score: 54/100
CVSS: 7.2 v3.1
Exploit chance (30 days): 0.7%
Published: 29 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is: IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.
Affected: Ibm Guardium Data Protection
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Story map

Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Ibm Guardium Data Protection: Amber, patch this week. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.

The flaws

CVE-2026-84422: OS command injection (CVSS 7.2 · EPSS 1%)
CVE-2026-75875: Path traversal can lead to remote code execution (CVSS 9.8 · EPSS 1%)
CVE-2026-84249: Missing authentication (CVSS 9.8 · EPSS 0%)
CVE-2026-84272: Missing authentication (CVSS 9.8 · EPSS 0%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Ibm Guardium Data Protection

Where it stands

No known exploitation

Connects to

Same weakness: OS command injection (CWE-78). 308 other warnings in 30 days
Same product: Earlier Ibm Guardium Data Protection warnings. 37 in the last 90 days

Why it is Yellow

CVSS 7.2 high

References

https://www.ibm.com/support/pages/node/7288034

Original description

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.

Last activity 29 Sep 2026. Patch Forecast updates every hour.