{"id":"CVE-2026-84246","published":"2026-10-08T22:17:33.850","lastModified":"2026-10-14T20:36:29.493","description":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-120"],"vendors":["ibm"],"products":["guardium data protection"],"references":[{"url":"https://www.ibm.com/support/pages/node/7291674","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in IBM Guardium Data Protection allows remote attackers to execute arbitrary code with high severity impact. This flaw occurs in versions 12.0, 12.1, and 12.2, making them susceptible to remote code execution attacks.","exploitability":"Exploitation requires a remote attacker with no authentication needed, but may require specific input conditions to trigger the buffer overflow, making it moderately difficult to exploit in practice.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over affected Guardium systems, potentially leading to data exfiltration, system compromise, and unauthorized access to sensitive data protection infrastructure.","remediation":"Upgrade to IBM Guardium Data Protection 12.3 or later to remediate this buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","buffer-overflow","database"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:18:27.836Z"}}