CVE-2026-84030 · Vendor
NO FIX YET
IBM Guardium Data Protection 12.2.4 does not neutralize special elements in SQL commands, so a remote attacker can inject and run arbitrary SQL. The sources give a CVSS score of 5.6 (medium) and do not describe authentication requirements or the fixed version.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running IBM Guardium Data Protection 12.2.4 that expose its interfaces to the network. The sources do not state whether authentication is required or which configurations are affected.
Not affected if other-versions
Who cares database-security, ibm-guardium, self-hosted
12.2.4No fix yet, per the sources.
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.