CVE-2026-82340Patch(ibm / guardium_data_protection)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch ibm guardium_data_protection systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.

ibm CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://www.ibm.com/support/pages/node/7288040

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

guardium_data_protection

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 3 signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-09-19); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

ibm

Products

guardium_data_protection

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Patch

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-18	1	Patch1
2026-09-19	2	General1Patch1
2026-10-03	1	Patch1

Full discourse4 posts

Dark Web Intelligence@DailyDarkWeb46d
Patch
🚨 IBM GUARDIUM DATA PROTECTION 12.2 — CRITICAL UNAUTHENTICATED RCE / AUTH BYPASS CLUSTER IBM published security bulletins for Guardium Data Protection 12.2 covering multiple critical unauthenticated issues (initial publish 2026-09-17). Lead CVEs include: • CVE-2026-81657 — CVSS 9.8 unauthenticated RCE via deserialization • CVE-2026-82340 — CVSS 9.8 unauthenticated CAS insecure deserialization • CVE-2026-82967 — CVSS 9.8 unauthenticated bypass of IP-based access controls Additional criticals are documented in the official IBM support pages. ⚠️ Analyst Note: This is an official IBM vendor bulletin set — not a dark-web claim and not framed as a CISA KEV listing unless separately verified. Patch via IBM Fix Central and review management-plane exposure promptly. Official IBM pages: https://www.ibm.com/support/pages/node/7288040 https://www.ibm.com/support/pages/node/7288035 #DDW #DarkWeb #CVE #IBM #Guardium #RCE #CyberSecurity
Post summary
IBM released security bulletins for Guardium Data Protection 12.2 detailing three critical unauthenticated RCE/access-bypass vulnerabilities (CVEs CVE-2026-81657, CVE-2026-82340, CVE-2026-82967) with CVSS 9.8, and explicitly directs remediation via IBM Fix Central.
000837.1K
209.0K followersView on X
VulDB 🛡@vuldb45d
General
The severity is increased for this new vulnerability affecting IBM Guardium Data Protection (CVE-2026-82340) https://vuldb.com/vuln/407799
Post summary
The tweet announces increased severity for a new vulnerability (CVE-2026-82340) affecting IBM Guardium Data Protection and links to a vuldb entry, without providing PoC, exploit, active exploitation, patch, or technical details.
01030218
2.3K followersView on X
DFIR Lab@DFIR_Lab32d
Patch
🚨 CRITICAL: CVE-2026-82340 (CVSS 9.8) IBM Guardium Data Protection 12.2 vulnerable to unauthenticated insecure deserialization on TCP 16017. Remote code execution possible. Patch immediately. #CVE #PatchNow https://t.co/XoKI2p2z4Z
Post summary
The tweet announces a critical unauthenticated insecure deserialization vulnerability in IBM Guardium Data Protection with RCE capability and urges immediate patching, providing sufficient technical details without reporting active exploitation or linking to a PoC.
0000039
145 followersView on X
♫Why♥Not♪@Python_s_45d
Patch
🚨#تحذير_أمني من IBM كشفت IBM عن ثغرات حرجة في Guardium Data Protection 12.2 بينها CVE-2026-82340 وCVE-2026-81657 الخطر تنفيذ كود عن بعد دون مصادقة على جهاز حماية البيانات لا يوجد حتى الآن تأكيد موثوق على استغلالها فعليًا ✅ الحل طبّق Fix Pack الرسمي فورًا وقيّد الوصول الشبكي إلى خدمات Guardium وخصوصًا TCP 16017 المصدر الرسمي IBM https://www.ibm.com/support/pages/security-bulletin-ibm-guardium-data-protection-affected-multiple-vulnerabilities-19
Post summary
IBM disclosed critical RCE vulnerabilities in Guardium Data Protection 12.2 with official Fix Pack remediation and network restrictions advised; no active exploitation or PoC reported.
0000051
223 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ibm	guardium_data_protection	12.2	-	-

Explore more

Back to dashboard ibm CVEs guardium_data_protection vulnerabilities

What researchers are saying

CVE-2026-82340

Dark Web Intelligence[verified]@DailyDarkWebPatch

IBM released security bulletins for Guardium Data Protection 12.2 detailing three critical unauthenticated RCE/access-bypass vulnerabilities (CVEs CVE-2026-81657, CVE-2026-82340, CVE-2026-82967) with CVSS 9.8, and explicitly directs remediation via IBM Fix Central.

DFIR Lab[verified]@DFIR_LabPatch

The tweet announces a critical unauthenticated insecure deserialization vulnerability in IBM Guardium Data Protection with RCE capability and urges immediate patching, providing sufficient technical details without reporting active exploitation or linking to a PoC.

♫Why♥Not♪[verified]@Python_s_Patch

IBM disclosed critical RCE vulnerabilities in Guardium Data Protection 12.2 with official Fix Pack remediation and network restrictions advised; no active exploitation or PoC reported.

VulDB 🛡@vuldbGeneral

The tweet announces increased severity for a new vulnerability (CVE-2026-82340) affecting IBM Guardium Data Protection and links to a vuldb entry, without providing PoC, exploit, active exploitation, patch, or technical details.