{"id":"CVE-2026-81932","published":"2026-10-08T22:17:32.493","lastModified":"2026-10-14T20:34:43.387","description":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","cwes":["CWE-89"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291674","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows a remote unauthenticated attacker to perform SQL injection, potentially leading to unauthorized access to, modification, or deletion of sensitive data.","exploitability":"Exploitation requires sending specially crafted SQL statements, which could be relatively easy for an attacker with knowledge of the system's SQL syntax.","blast_radius":"If exploited, the attacker could view, add, modify, or delete information in the back-end database, leading to significant data loss or compromise.","remediation":"Upgrade to IBM Guardium Data Protection 12.0.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","data-exposure","remote","unauthenticated"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:44:48.514Z"}}