CVE-2026-84035

Published Oct 8, 2026

Last updated 24 days ago

CVSS high 8.1

Overview

Description: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
Source: psirt@us.ibm.com
NVD status: Analyzed
Products: guardium_data_protection

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

psirt@us.ibm.com: CWE-121

Hype score: Not currently trending

🚨 HIGH SEVERITY: CVE-2026-84035 (CVSS 8.1) IBM Guardium Data Protection 12.0-12.2 vulnerable to remote code execution via stack-based buffer overflow. Network exploitable, no user interaction required. Patch immediately. #CVE #PatchNow https://t.co/4goxS4Ue55
@DFIR_Lab
7 Nov 2026
31 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ibm:guardium_data_protection:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "FBB1DB52-938C-478D-A3F3-18F13588EABC",
            "versionEndIncluding": "12.2",
            "versionStartIncluding": "12.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References