CVE-2026-84106 is a vulnerability in IBM Guardium Data Protection 12.2 where improper neutralization of input during web page generation could enable a remote authenticated attacker to execute arbitrary code. The vulnerability has a CVSS v3.1 base score of 8.9, indicating high severity, with attack vector network, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability. The CWE classification is CWE-79, indicating a cross-site scripting or similar input validation issue. No patch or remediation details are provided in the available data.

Successful exploitation could allow a remote authenticated attacker to execute arbitrary code, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires authentication and user interaction but can be performed remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Until a patch is available, monitor vendor communications for updates and consider limiting access to the affected system to trusted users.