Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
🔐 IBM Guardium Mass Disclosure — 5 Critical CVEs, Peak CVSS 9.8 in Data Protection Platform IBM published security bulletins on October 8, 2026 covering five critical vulnerabilities in IBM Gu 🔗 https://threataft.com/articles/ibm-guardium-mass-disclosure-cve-2026-84272-75875-80381-84249-84244?utm_source=twitter&utm_medium=social&utm_campaign=share #CyberSecurity #ThreatIntel
CVE-2026-84272 IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could explo… https://www.cve.org/CVERecord?id=CVE-2026-84272
IBM patches 9 Guardium Data Protection flaws. • CVE-2026-84272: 9.8, missing auth in edge-controller • CVE-2026-84244: 9.3, stored XSS via database traffic • 7 more high-severity issues in protocol parsers and local components https://thecircuitry.to/article/ibm-patches-nine-guardium-data-protection-flaws-muzzrpku https://t.co/7WMtaJJVJu
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | guardium_data_protection | 12.1 | - | - |
| App | ibm | guardium_data_protection | 12.2.2 | - | - |