CVE-2026-84036 describes an improper authorization vulnerability (CWE-285) in IBM Guardium Data Protection 12.2. A remote attacker with valid authentication credentials could exploit this flaw to bypass security restrictions, potentially leading to unauthorized access or actions within the system. The vulnerability has a CVSS 3.1 base score of 7.4, reflecting a high severity with network attack vector, low attack complexity, required privileges, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an authenticated attacker to bypass security controls, potentially resulting in partial loss of confidentiality, integrity, and availability of the affected system. This could enable unauthorized access or modification of protected data or system functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor IBM's security advisories for updates. In the meantime, restrict access to trusted users and review authentication and authorization configurations to minimize risk.