{"id":"CVE-2026-84209","published":"2026-10-08T22:17:33.583","lastModified":"2026-10-15T00:05:16.947","description":"IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7288832","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM Guardium Data Protection is vulnerable to SQL injection attacks that allow remote attackers to execute arbitrary SQL commands. This flaw occurs when user input is not properly sanitized before being included in SQL queries, potentially leading to unauthorized database access and data manipulation.","exploitability":"Exploitation requires a remote connection to the Guardium system with minimal preconditions, as the vulnerability affects the SQL command processing without requiring authentication or specific user privileges.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full database access, potentially leading to data exfiltration, modification of sensitive information, and unauthorized access to protected data assets across the organization.","remediation":"Upgrade to IBM Guardium Data Protection 12.2.3 or later to remediate this SQL injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","database","remote-exploitation"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:18:33.635Z"}}