VulnSocial

CVE-2026-82967Patch(ibm / guardium_data_protection)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch ibm guardium_data_protection systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface.

ibm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • guardium_data_protection

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
ibm
Products
guardium_data_protection

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-18: 1Patch / Workaround · 2026-09-18: 1Technical Details · 2026-09-18: 109-18
Signal classification1 categories
Patch
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • Dark Web Intelligence@DailyDarkWeb
    Patch

    🚨 IBM GUARDIUM DATA PROTECTION 12.2 — CRITICAL UNAUTHENTICATED RCE / AUTH BYPASS CLUSTER IBM published security bulletins for Guardium Data Protection 12.2 covering multiple critical unauthenticated issues (initial publish 2026-09-17). Lead CVEs include: • CVE-2026-81657 — CVSS 9.8 unauthenticated RCE via deserialization • CVE-2026-82340 — CVSS 9.8 unauthenticated CAS insecure deserialization • CVE-2026-82967 — CVSS 9.8 unauthenticated bypass of IP-based access controls Additional criticals are documented in the official IBM support pages. ⚠️ Analyst Note: This is an official IBM vendor bulletin set — not a dark-web claim and not framed as a CISA KEV listing unless separately verified. Patch via IBM Fix Central and review management-plane exposure promptly. Official IBM pages: https://www.ibm.com/support/pages/node/7288040 https://www.ibm.com/support/pages/node/7288035 #DDW #DarkWeb #CVE #IBM #Guardium #RCE #CyberSecurity

    Post summary

    IBM disclosed critical vulnerabilities in Guardium Data Protection 12.2, including unauthenticated RCE and access control bypass, and advised patching via IBM Fix Central.

    000837.1K
    209.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmguardium_data_protection12.2--

Explore more

Back to dashboardibm CVEsguardium_data_protection vulnerabilities