High severity · published Sep 29, 2026
CVE-2026-84422
IBM Guardium Data Protection is affected by multiple vulnerabilities.
7.2
CVSS
0.7%
EPSS
No
On KEV
Description
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Guardium Data Protection · IBM
12.2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-84422
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-84422
vendor-advisory
https://www.ibm.com/support/pages/node/7288034
More from Guardium Data Protection
9.9
CVE-2026-84078
IBM Guardium Data Protection is affected by multiple vulnerabilities.
9.9
CVE-2026-84075
IBM Guardium Data Protection is affected by multiple vulnerabilities.
9.9
CVE-2026-84064
IBM Guardium Data Protection is affected by multiple vulnerabilities.
9.8
CVE-2026-75875
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
9.8
CVE-2026-80381
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection