CVE-2026-81657

CVE-2026-81657 is a security vulnerability identified in IBM Guardium Data Protection version 12.2. This flaw stems from the improper handling of serialized objects, specifically the deserialization of untrusted data. The vulnerability allows a remote, unauthenticated attacker to execute arbitrary code on the affected system. This is achieved by injecting maliciously crafted input that triggers unsafe object reconstruction within the system's memory space, bypassing standard authentication mechanisms. The issue aligns with Common Weakness Enumeration (CWE) identifier CWE-502, which pertains to the deserialization of untrusted data.