CVE-2026-8405 is a vulnerability in IBM Guardium Data Protection 12.2.1 and 12.2.2, specifically affecting the Long Term Retention (LTR) add-on feature. When debug mode is enabled, sensitive credentials may be exposed to unauthorized actors. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 3.1 base score is 6.5, with an attack vector of network, low attack complexity, requiring low privileges, no user interaction, and impacts confidentiality only. No official patch or remediation level has been published by IBM as of the data provided.

The vulnerability allows exposure of sensitive credentials, which could lead to unauthorized access to protected data or systems if exploited. However, exploitation requires the attacker to have some level of privileges (PR:L), and no integrity or availability impacts are indicated. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is advisable to avoid enabling debug mode in the Long Term Retention feature or restrict access to debug logs to trusted administrators only. Monitor IBM's official channels for updates on patches or mitigations.