# IBM Guardium Data Protection vulnerabilities Source: https://junglewise.ai/threats/technologies/guardium-data-protection Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/guardium-data-protection.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 93 vulnerabilities in IBM Guardium Data Protection: 3 in the last 7 days and 87 in the last 90 days, 18 of them critical and 0 exploited in the wild. The most recent, CVE-2026-84229, was published on 8 November 2026. 4 vulnerabilities in the last four weeks, down 95% on the four before (83). 0 critical against 18. ## Counts - Last 7 days: 3 - Last 30 days: 4 - Last 90 days: 87 - All time: 93 (18 critical, 0 exploited in the wild) ## About IBM Guardium Data Protection A data security platform that provides automated discovery, classification, and monitoring of sensitive data across hybrid cloud environments. ## Latest IBM Guardium Data Protection vulnerabilities - [CVE-2026-84229: IBM Guardium Data Protection CSRF token bypass in GET requests](https://junglewise.ai/threats/cve-2026-84229-ibm-guardium-data-protection-12-2-4-could-allow-a-remote-attacker) (medium, CVSS 6.5, published 8 Nov 2026) - [CVE-2026-84030: IBM Guardium Data Protection SQL injection](https://junglewise.ai/threats/cve-2026-84030-ibm-guardium-data-protection-12-2-4-could-allow-a-remote-attacker) (medium, CVSS 5.6, published 8 Nov 2026) - [CVE-2026-82830: IBM Guardium Data Protection argument injection](https://junglewise.ai/threats/cve-2026-82830-ibm-guardium-data-protection-12-2-4-could-allow-a-remote) (medium, CVSS 6.7, published 8 Nov 2026) - [CVE-2026-82891: IBM Guardium Data Protection hard-coded cryptographic key exposure](https://junglewise.ai/threats/cve-2026-82891-ibm-guardium-data-protection-12-1-and-12-2-could-allow-a-remote) (high, CVSS 8.1, published 20 Oct 2026) - [CVE-2026-87980: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to…](https://junglewise.ai/threats/cve-2026-87980-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (low, CVSS 3.1, published 8 Oct 2026) - [CVE-2026-84891: IBM Guardium Data Protection hard-coded credentials in Windows GIM](https://junglewise.ai/threats/cve-2026-84891-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (medium, CVSS 5.9, published 8 Oct 2026) - [CVE-2026-84875: IBM Guardium Data Protection buffer overflow in Sniffer](https://junglewise.ai/threats/cve-2026-84875-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (high, CVSS 7.5, published 8 Oct 2026) - [CVE-2026-84249: IBM Guardium Data Protection missing authentication for critical function](https://junglewise.ai/threats/cve-2026-84249-ibm-guardium-data-protection-12-2-and-12-2-2-could-allow-a-remote) (critical, CVSS 9.8, published 8 Oct 2026) - [CVE-2026-84247: IBM Guardium Data Protection path traversal denial of service](https://junglewise.ai/threats/cve-2026-84247-ibm-guardium-data-protection-12-2-could-allow-a-remote) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84246: IBM Guardium Data Protection buffer overflow in Sniffer](https://junglewise.ai/threats/cve-2026-84246-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84230: IBM Guardium Data Protection race condition denial of service](https://junglewise.ai/threats/cve-2026-84230-ibm-guardium-data-protection-12-2-2-could-allow-a-remote-attacker) (high, CVSS 7.5, published 8 Oct 2026) - [CVE-2026-84209: IBM Guardium Data Protection SQL injection](https://junglewise.ai/threats/cve-2026-84209-ibm-guardium-data-protection-12-2-2-and-12-1-could-allow-a-remote) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84198: IBM Guardium Data Protection buffer overflow in Sniffer](https://junglewise.ai/threats/cve-2026-84198-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84058: IBM Guardium Data Protection buffer overflow in TDS PRELOGIN decoder](https://junglewise.ai/threats/cve-2026-84058-ibm-guardium-data-protection-12-0-12-1-and-12-2-is-vulnerable-to) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84057: IBM Guardium Data Protection OS command injection](https://junglewise.ai/threats/cve-2026-84057-ibm-guardium-data-protection-12-2-2-and-12-1-could-allow-a-remote) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84035: IBM Guardium Data Protection stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-84035-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-84032: IBM Guardium Data Protection improper certificate validation](https://junglewise.ai/threats/cve-2026-84032-ibm-guardium-data-protection-12-2-2-could-allow-a-remote-attacker) (medium, CVSS 5.6, published 8 Oct 2026) - [CVE-2026-82900: IBM Guardium Data Protection arbitrary file deletion via path traversal](https://junglewise.ai/threats/cve-2026-82900-ibm-guardium-data-protection-12-2-2-and-12-1-could-allow-a-remote) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-82895: IBM Guardium Data Protection buffer overflow in Sniffer component](https://junglewise.ai/threats/cve-2026-82895-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (high, CVSS 8.1, published 8 Oct 2026) - [CVE-2026-81932: IBM Guardium Data Protection SQL injection](https://junglewise.ai/threats/cve-2026-81932-ibm-guardium-data-protection-12-0-12-1-and-12-2-is-vulnerable-to) (high, CVSS 8.6, published 8 Oct 2026) - [CVE-2026-80381: IBM Guardium Data Protection SQL injection in Sniffer](https://junglewise.ai/threats/cve-2026-80381-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (critical, CVSS 9.8, published 8 Oct 2026) - [CVE-2026-75875: IBM Guardium Data Protection path traversal remote code execution](https://junglewise.ai/threats/cve-2026-75875-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (critical, CVSS 9.8, published 8 Oct 2026) - [CVE-2026-84275: IBM Guardium Data Protection path traversal in GIM file upload](https://junglewise.ai/threats/cve-2026-84275-ibm-guardium-data-protection-12-2-is-vulnerable-to-path-traversal) (high, CVSS 7.5, published 8 Oct 2026) - [CVE-2026-84274: IBM Guardium Data Protection sensitive information exposure in credential rotation](https://junglewise.ai/threats/cve-2026-84274-ibm-guardium-data-protection-12-2-2-is-affected-by-a-sensitive) (medium, CVSS 6.5, published 8 Oct 2026) - [CVE-2026-84272: IBM Guardium Data Protection missing authentication in edge-controller](https://junglewise.ai/threats/cve-2026-84272-ibm-guardium-data-protection-12-1-and-12-2-2-are-vulnerable-to) (critical, CVSS 9.8, published 8 Oct 2026) ## Most severe IBM Guardium Data Protection vulnerabilities - [CVE-2026-80442: IBM Guardium Data Protection OS command injection in exportCertificate](https://junglewise.ai/threats/cve-2026-80442-ibm-guardium-data-protection-12-2-is-vulnerable-to-an) (critical, CVSS 9.9, published 18 Sep 2026) - [CVE-2026-84064: IBM Guardium Data Protection SQL injection](https://junglewise.ai/threats/cve-2026-84064-ibm-guardium-data-protection-12-2-could-allow-a-remote) (critical, CVSS 9.9, published 18 Sep 2026) - [CVE-2026-84075: IBM Guardium Data Protection authentication bypass in ChangeTrackerServlet](https://junglewise.ai/threats/cve-2026-84075-ibm-guardium-data-protection-12-2-could-allow-a-remote-attacker) (critical, CVSS 9.9, published 18 Sep 2026) - [CVE-2026-84078: IBM Guardium Data Protection missing authentication in LoadBalancerServlet](https://junglewise.ai/threats/cve-2026-84078-ibm-guardium-data-protection-12-2-is-vulnerable-to-a-missing) (critical, CVSS 9.9, published 18 Sep 2026) - [CVE-2026-81657: IBM Guardium Data Protection deserialization code execution](https://junglewise.ai/threats/cve-2026-81657-ibm-guardium-data-protection-12-2-could-allow-a-remote) (critical, CVSS 9.8, published 18 Sep 2026) - [CVE-2026-82967: IBM Guardium Data Protection authentication bypass in IP-based access control](https://junglewise.ai/threats/cve-2026-82967-ibm-guardium-data-protection-12-2-is-vulnerable-to-an) (critical, CVSS 9.8, published 18 Sep 2026) - [CVE-2026-82340: IBM Guardium Data Protection unauthenticated deserialization in CAS listener](https://junglewise.ai/threats/cve-2026-82340-ibm-guardium-data-protection-12-2-is-vulnerable-to) (critical, CVSS 9.8, published 18 Sep 2026) - [CVE-2026-84082: IBM Guardium Data Protection SQL injection](https://junglewise.ai/threats/cve-2026-84082-ibm-guardium-data-protection-12-2-could-allow-a-remote-attacker) (critical, CVSS 9.8, published 18 Sep 2026) - [CVE-2026-75875: IBM Guardium Data Protection path traversal remote code execution](https://junglewise.ai/threats/cve-2026-75875-ibm-guardium-data-protection-12-0-12-1-and-12-2-could-allow-a) (critical, CVSS 9.8, published 8 Oct 2026) - [CVE-2026-80441: IBM Guardium Data Protection SQL injection in generateInsertQuery](https://junglewise.ai/threats/cve-2026-80441-ibm-guardium-data-protection-12-2-is-vulnerable-to-an) (critical, CVSS 9.8, published 18 Sep 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, down 95% on the four before (83). 0 critical against 18. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 42 | 12 | 0 | | 21 Sep 2026 | 6 | 0 | 0 | | 28 Sep 2026 | 4 | 1 | 0 | | 5 Oct 2026 | 31 | 5 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other IBM technologies - [IBM API Connect](https://junglewise.ai/threats/technologies/api-connect): 207 vulnerabilities - [IBM AIX](https://junglewise.ai/threats/technologies/aix): 181 vulnerabilities - [IBM Langflow](https://junglewise.ai/threats/technologies/langflow-oss): 154 vulnerabilities - [IBM i](https://junglewise.ai/threats/technologies/i): 120 vulnerabilities - [IBM PowerVM VIOS](https://junglewise.ai/threats/technologies/powervm-vios): 73 vulnerabilities - [IBM Vios](https://junglewise.ai/threats/technologies/vios): 72 vulnerabilities - [IBM WebSphere Application Server](https://junglewise.ai/threats/technologies/websphere-application-server): 67 vulnerabilities - [IBM WebSphere Application Server Liberty](https://junglewise.ai/threats/technologies/websphere-application-server-liberty): 56 vulnerabilities - [IBM Verify Identity Access](https://junglewise.ai/threats/technologies/verify-identity-access): 50 vulnerabilities - [IBM Datastage On Cloud Pak For Data](https://junglewise.ai/threats/technologies/datastage-on-cloud-pak-for-data): 48 vulnerabilities - [IBM Mq](https://junglewise.ai/threats/technologies/mq): 46 vulnerabilities - [IBM Financial Transaction Manager](https://junglewise.ai/threats/technologies/financial-transaction-manager): 45 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "IBM Guardium Data Protection vulnerabilities", https://junglewise.ai/threats/technologies/guardium-data-protection, 9 November 2026.