IBM patches nine Guardium Data Protection flaws

IBM has issued fixes for nine vulnerabilities in Guardium Data Protection versions 12.0, 12.1, 12.2, and 12.2.2.

Two flaws carry critical severity scores. CVE-2026-84272 scores 9.8 and stems from missing authentication in the edge-controller component on versions 12.1 and 12.2.2. An unauthenticated remote attacker could execute arbitrary container images and gain control of managed edge clusters.

CVE-2026-84244 scores 9.3 and affects version 12.2. It allows stored cross-site scripting in the Quick Search results grid. An unauthenticated attacker who influences monitored database traffic could run malicious scripts in an authenticated user's browser.

Four high-severity issues involve protocol parsers. CVE-2026-82334, CVE-2026-82335, and CVE-2026-82344 each score 8.1. They affect versions 12.0, 12.1, and 12.2. The flaws include a heap-based out-of-bounds read in the TDS7 LOGIN7 parser, a heap-based buffer overflow in the MongoDB protocol parser, and a heap-based buffer overflow in S-TAP TrafficTap TDS login reassembly.

Remote attackers can trigger information disclosure, denial of service, or arbitrary code execution through crafted packets or usernames.

Three additional high-severity flaws affect version 12.2 only. CVE-2026-84250 scores 8.4 and involves weak cryptographic protection plus a hard-coded recovery key in the pkcrypto passkey component. A local attacker could recover the root password. CVE-2026-84245 scores 7.8 and allows local privilege escalation in the cp_wrapper component. CVE-2026-84271 scores 7.8 and permits signature verification bypass in the patch installer, enabling arbitrary code execution with root privileges. CVE-2026-84275 scores 7.5 and permits path traversal in GIM file-upload functionality, allowing an unauthenticated attacker to write arbitrary files to the Collector.

IBM provides remediation links for each CVE. The fixes address all listed issues across the affected releases. Organizations running Guardium Data Protection should apply the updates referenced in the IBM support pages.