{"id":"CVE-2026-84249","published":"2026-10-08T22:17:34.213","lastModified":"2026-10-10T04:18:18.437","description":"IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7288036","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows a remote attacker to execute arbitrary management operations without authentication, posing a critical risk due to the potential for unauthorized access and control over the system.","exploitability":"Exploitation is relatively straightforward as no authentication is required, and the critical functions are exposed to remote attackers.","blast_radius":"If exploited, the impact could be severe, as it allows full control over the IBM Guardium Data Protection system, potentially leading to data breaches and system compromise.","remediation":"Upgrade to IBM Guardium Data Protection 12.2.3 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","management","remote"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:19.488Z"}}