CVE-2026-84077 describes a cross-site request forgery vulnerability in IBM Guardium Data Protection 12.2. This vulnerability allows a remote attacker to bypass security restrictions by tricking an authenticated user into submitting unauthorized requests, potentially leading to high impact on integrity and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, but high integrity and availability impact.

Successful exploitation could allow an attacker to perform unauthorized actions with the privileges of an authenticated user, potentially compromising the integrity and availability of the system. Confidentiality is not impacted according to the CVSS vector. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Until a patch is available, cautious handling of user sessions and CSRF protections such as anti-CSRF tokens should be considered if applicable.