CVE-2026-84082 is an SQL injection vulnerability in IBM Guardium Data Protection 12.2. The flaw arises from improper neutralization of special elements used in SQL commands, enabling remote attackers to execute arbitrary SQL commands on the affected system. This vulnerability is remotely exploitable without authentication and requires low attack complexity, resulting in high impact on confidentiality, integrity, and availability of the system.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected IBM Guardium Data Protection 12.2 system. This can lead to full compromise of the database, including unauthorized data disclosure, data modification, and potential denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IBM's official security advisories for updates and apply any released patches promptly. In the meantime, consider restricting network access to the affected service to trusted sources only.