{"id":"CVE-2026-84035","published":"2026-10-08T22:17:33.027","lastModified":"2026-10-14T20:29:59.247","description":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291674","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in IBM Guardium Data Protection allows remote attackers to execute arbitrary code with high severity. This vulnerability arises from insufficient bounds checking when processing user input, potentially enabling attackers to gain full system control.","exploitability":"Exploitation requires a remote attacker with network access to the vulnerable service, and is moderately difficult due to the need for precise buffer overflow crafting but does not require user interaction or elevated privileges.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on the Guardium server, potentially leading to complete system compromise, data exfiltration, and lateral movement within the protected network environment.","remediation":"Upgrade to IBM Guardium Data Protection 12.2.1 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","database","enterprise"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:18:59.749Z"}}