Guardium Data Protection

A security flaw tracked as EUVD-2026-95235 has been documented in IBM Guardium Data Protection 12.2, with a CVSS v3.1 score of 7.5. The issue is a path traversal bug in the GIM file-upload functionality, which an unauthenticated attacker could potentially exploit. The record was updated on 8 October 2026, and security teams are being urged to review their Guardium deployments for exposure.

A critical vulnerability, tracked as EUVD-2026-95239, has been published for IBM Guardium Data Protection versions 12.1 and 12.2.2. The flaw carries a CVSS v3.1 score of 9.8 and involves missing authentication in the edge-controller component. Security teams are expected to check whether their deployments are affected and watch for patches or workarounds from IBM.

A high-severity vulnerability, tracked as EUVD-2026-9524 and scored 7.8 on CVSS v3.1, has been disclosed in IBM Guardium Data Protection 12.2. The flaw is a signature verification bypass in the patch installer, meaning an attacker with local access could potentially install malicious patches. The advisory was updated on 8 October 2026, and security teams running Guardium are being urged to review the details and apply any fixes.

A newly updated vulnerability advisory, EUVD-2026-95241, flags IBM Guardium Data Protection 12.2 with a high severity rating of 8.4 out of 10 under CVSS v3.1. The flaw stems from weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component, exploitable by a local attacker. Administrators running Guardium are urged to review the advisory and apply vendor patches.

A high-severity vulnerability, tracked as EUVD-2026-95242, has been published for IBM Guardium Data Protection 12.2. The flaw, rated 7.8 out of 10 on the CVSS v3.1 scale, is a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit it to gain higher-level access. The advisory entry was updated on 8 October 2026.