CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

High 8.1 Published 8 Oct 2026 Updated 10 Oct 2026

Remote attackers can execute arbitrary commands on IBM Guardium Data Protection due to improper neutralization of OS command special elements.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-84057?

CVE-2026-84057 is a high-severity command injection vulnerability in Ibm Guardium Data Protection, published on 8 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

Weakness: CWE-78

Which versions are affected by CVE-2026-84057?

It affects 1 product.

Products include Ibm Guardium Data Protection.

How do I fix CVE-2026-84057?

No fix has been published for CVE-2026-84057 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2026-84057 being exploited?

There is no known exploitation of CVE-2026-84057 in the wild and no public exploit code.

All Ibm Guardium Data Protection vulnerabilities

Sources

Also known as GHSA-wr2f-8qmg-xp64.