VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 18, 2026· Updated Oct 6, 2026

CVE-2026-84071

CVE-2026-84071

Description

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Guardium Data Protection2 versions
    cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
    • (no CPE)range: =12.2

Patches

Vulnerability mechanics

References

1

News mentions

1