CVE-2026-81933

HIGHCVSS 8.8

Description

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Analytic Grid Service Handler. A low-privileged authenticated user can inject SQL statements through the analytic cases grid endpoint, potentially resulting in unauthorized access to sensitive data and impact to the confidentiality, integrity, and availability of the affected system.

Timeline

Published:September 18th, 2026 8:17 PM

Last modified:September 23rd, 2026 4:17 AM

CVSS Scoring

CVSS v3: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-89

References & Reports

Advisories, patches, and third-party reports

https://www.ibm.com/support/pages/node/7288040

Source: NIST NVD · Data may lag official sources by up to one minute