CVE-2026-82890 describes a cross-site scripting vulnerability in IBM Guardium Data Protection 12.2. The flaw arises from improper neutralization of input during the generation of web pages, which could enable a remote authenticated attacker to execute arbitrary JavaScript code in the context of the affected application. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, low confidentiality impact, high integrity impact, and no availability impact.

An attacker with remote authenticated access could exploit this vulnerability to execute arbitrary JavaScript code, potentially leading to unauthorized actions or data manipulation within the application context. The confidentiality impact is low, but the integrity impact is high. There is no indication of availability impact or known active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor IBM's security advisories for updates. Until a patch is available, restricting access to trusted users and minimizing exposure of the affected interface may reduce risk.