CVE-2026-81933 is a SQL injection vulnerability (CWE-89) affecting IBM Guardium Data Protection 12.2. The vulnerability exists in the Analytic Grid Service Handler where a low-privileged authenticated user can inject malicious SQL statements through the analytic cases grid endpoint. This can result in unauthorized data access and compromise of system confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, and no user interaction required.

Exploitation of this vulnerability can lead to unauthorized access to sensitive data and potentially disrupt the affected system's confidentiality, integrity, and availability. Given the high CVSS score of 8.8, the impact is significant, allowing attackers with low privileges to perform SQL injection attacks that could compromise critical data and system operations.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict access to the analytic cases grid endpoint to trusted users and monitor for suspicious activity related to SQL injection attempts.