Threat database

CVE-2026-78404 is a local privilege escalation vulnerability in IBM Db2 affecting versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5. The issue arises from improper privilege management in the db2pd utility, allowing a local attacker with limited privileges to escalate to higher privileges. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level. There are no known exploits in the wild and no vendor-provided patch information is currently available.

CVE-2026-75875 is a critical path traversal vulnerability in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. This flaw allows a remote attacker to execute arbitrary code by improperly limiting pathname access to restricted directories.

CVE-2026-80381 is a critical SQL injection vulnerability in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. This flaw allows a remote attacker to execute unauthorized SQL commands without any privileges or user interaction, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system.

CVE-2026-82895 is a high-severity buffer overflow vulnerability in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. It allows a remote attacker to execute arbitrary code due to improper handling of input size during buffer copy operations.

IBM Guardium Data Protection versions 12.1 and 12.2.2 contain a path traversal vulnerability (CWE-22) that could allow a remote attacker to delete arbitrary files. This vulnerability arises from improper limitation of pathnames to restricted directories, potentially enabling unauthorized file deletion. The vulnerability has a high severity with a CVSS score of 8.1.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a SQL injection vulnerability that allows a remote unauthenticated attacker to send specially crafted SQL statements. This could enable the attacker to view, add, modify, or delete data in the back-end database. The vulnerability has a high severity score of 8.6 and affects these specific versions.

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a stack-based buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability has a high severity with a CVSS score of 8.1. No patch or remediation information is currently provided. There are no known exploits in the wild at this time.

IBM Guardium Data Protection versions 12.2.2 and 12.1 contain an OS command injection vulnerability (CWE-78) that could allow a remote attacker to execute arbitrary commands. The vulnerability arises from improper neutralization of special elements used in OS commands. The CVSS 3.1 score is 8.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring no privileges or user interaction but high attack complexity.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overrun vulnerability in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. This flaw allows a remote attacker to send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector, potentially causing denial of service or arbitrary code execution on the Collector appliance. The vulnerability is identified as CWE-119 and has a CVSS 3.1 score of 8.1, indicating high severity.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability is due to improper size checking during buffer copy operations. It has a high severity with a CVSS score of 8.1. No patch or remediation details are provided in the available data.

IBM Guardium Data Protection versions 12.2.2 and 12.1 contain a SQL injection vulnerability due to improper neutralization of special elements in SQL commands. This flaw could allow a remote attacker to execute arbitrary SQL commands on the affected systems without authentication. The vulnerability has a high severity rating with a CVSS score of 8.1. No information about available patches or vendor advisories is provided.

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code. The vulnerability is due to improper handling of input size during buffer copy operations.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.

IBM Guardium Data Protection versions 12.2 and 12.2.2 contain a critical vulnerability (CVE-2026-84249) due to missing authentication for a critical function. This flaw allows a remote attacker to execute arbitrary management operations without authentication. The vulnerability has a CVSS 3.1 score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability.

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that could allow a remote attacker with low privileges to execute arbitrary code. The vulnerability is classified as CWE-119 and has a CVSS 3.1 score of 7.5, indicating high severity. No patch or remediation information is provided in the available data.

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.

CVE-2026-11888 is a medium severity vulnerability in IBM Security Verify Access and IBM Verify Identity Access. It affects versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3. The vulnerability involves improper control of code generation, classified as CWE-94, which can lead to information disclosure. The CVSS 3.1 base score is 6.4, indicating a moderate risk with network attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.