CVE-2026-84034 is a vulnerability in IBM Guardium Data Protection 12.2 involving the use of hardcoded credentials within the hardware_assess/obstore binaries. An attacker with low-level authenticated access can recover these hardcoded product master secrets. This exposure could lead to unauthorized access to the internal database and compromise sensitive system data. The CVSS v3.1 score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No patch or vendor advisory information is provided, and no known exploits are reported in the wild.

The vulnerability allows a low-privileged authenticated user to obtain hardcoded master secrets, which may enable unauthorized access to the internal database. This can lead to compromise of sensitive system information, affecting confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for suspicious activity related to the hardware_assess/obstore binaries.