CVE-2026-81669

HIGHCVSS 7.2

Description

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges.

Timeline

Published:September 18th, 2026 8:17 PM

Last modified:September 23rd, 2026 4:17 AM

CVSS Scoring

CVSS v3: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

https://www.ibm.com/support/pages/node/7288040

Source: NIST NVD · Data may lag official sources by up to one minute