CVE-2026-84422

HIGHCVSS 7.2

Description

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.

Timeline

Published:September 29th, 2026 6:17 PM

Last modified:September 30th, 2026 4:18 AM

CVSS Scoring

CVSS v3: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

https://www.ibm.com/support/pages/node/7288034

Source: NIST NVD · Data may lag official sources by up to one minute