CVE-2026-84082 affects IBM Guardium Data Protection 12.2 and enables remote attackers to perform arbitrary SQL command execution by exploiting improper neutralization of special elements in SQL commands. This is a classic SQL injection vulnerability (CWE-89) that can be triggered remotely without authentication, resulting in complete compromise of the affected system's data confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting the critical nature of this flaw. No patch or remediation information is provided in the available data, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected IBM Guardium Data Protection 12.2 system. This could lead to unauthorized data access, data modification, or denial of service, severely impacting the confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected system and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable service to untrusted networks.