CVE-2026-84239 affects IBM Guardium Data Protection 12.2 and involves improper neutralization of special elements used in an SQL command, which could allow a remote authenticated attacker with high privileges to obtain sensitive information. The vulnerability is classified under CWE-89 (SQL Injection). The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and a scope change with high confidentiality impact and low availability impact.

An attacker with remote authenticated access and high privileges could exploit this vulnerability to extract sensitive information from the system. The vulnerability impacts confidentiality significantly and availability to a lesser extent, but does not affect integrity. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a patch is available, restrict access to trusted users with high privileges and monitor for suspicious activity related to SQL commands.