{"id":"CVE-2026-82891","kind":"vulnerability","aliases":["CVE-2026-82891"],"related":[],"title":"IBM Guardium Data Protection: hard-coded crypto key leaks sensitive information remotely","description":"IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.","summary":"IBM Guardium Data Protection 12.1 and 12.2 ship with a hard-coded cryptographic key. A remote attacker can use that key to obtain sensitive information.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["data-protection","ibm-guardium","on-prem","vendor"],"not_affected_if":[],"how_to_check":"- Check the installed Guardium Data Protection version against 12.1 and 12.2 in the appliance or console.\n- unknown for any other check; the sources do not say which configuration or file exposes the key.","fix":"- Move to a fixed IBM Guardium Data Protection release; the sources do not name the version.\n- unknown for any other action; check the IBM security bulletin for the fixed build.","status":"open","published_at":"2026-10-20T22:19:52+00:00","first_seen_at":"2026-10-23T21:57:25+00:00","triaged_at":"2026-10-25T03:06:14+00:00","updated_at":"2026-10-25T03:06:14+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-25T03:06:14Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a fixed IBM Guardium Data Protection release; the sources do not name the version.\n- unknown for any other action; check the IBM security bulletin for the fixed build.","reach":"internet","title":"IBM Guardium Data Protection: hard-coded crypto key leaks sensitive information remotely","impact":"medium","summary":"IBM Guardium Data Protection 12.1 and 12.2 ship with a hard-coded cryptographic key. A remote attacker can use that key to obtain sensitive information.","category":"vendor","nicknames":[],"who_cares":["ibm-guardium","data-protection","on-prem"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote attacker reads sensitive information protected by the hard-coded key","analyst_note":"Find the IBM security bulletin for CVE-2026-82891 to get the fixed version and the affected endpoint or configuration.","how_to_check":"- Check the installed Guardium Data Protection version against 12.1 and 12.2 in the appliance or console.\n- unknown for any other check; the sources do not say which configuration or file exposes the key.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Deployments of IBM Guardium Data Protection 12.1 and 12.2 are affected, since the hard-coded key is part of the product. The sources do not say which features or configurations expose it, so treat every reachable instance as in scope. unknown for who can safely skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000602,"input_tokens":3282,"output_tokens":548,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-82891':16A,19A '12.1':34B,60C '12.2':36B,62C 'allow':64C 'attack':47B,67C 'code':7A,42B,79C 'could':63C 'crypto':8A 'cryptograph':43B,80C 'cve':14A,17A 'data':3A,21B,32B,58C 'data-protect':20B 'due':72C 'guardium':2A,25B,31B,57C 'hard':6A,41B,78C 'hard-cod':5A,40B,77C 'ibm':1A,24B,30B,56C 'ibm-guardium':23B 'inform':12A,55B,71C 'key':9A,44B,51B,81C 'leak':10A 'obtain':53B,69C 'on-prem':26B 'prem':28B 'protect':4A,22B,33B,59C 'remot':13A,46B,66C 'sensit':11A,54B,70C 'ship':37B 'use':49B,74C 'vendor':29B","nicknames":[],"mitigations":[],"who_affected":"Deployments of IBM Guardium Data Protection 12.1 and 12.2 are affected, since the hard-coded key is part of the product. The sources do not say which features or configurations expose it, so treat every reachable instance as in scope. unknown for who can safely skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:52+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82891","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82891","severity":null,"published_at":"2026-10-20T22:19:52+00:00","modified_at":"2026-10-23T12:18:16+00:00","first_seen_at":"2026-10-23T21:57:25+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}