Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

IBM Guardium Data Protection Sniffer can run attacker code

CVE-2026-84246 · published 10 days ago
Summary

The Sniffer part of IBM Guardium Data Protection versions 12.0, 12.1 and 12.2 may let a remote attacker cause the software to run malicious code. This happens because the program can overflow a memory buffer when handling certain data. Apply the vendor’s security updates or patches as soon as possible to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm guardium data protection 12.0
ibm guardium_data_protection >= 12.0, <= 12.2
cpe:2.3:a:ibm:guardium_data_protection:*:*:*:*:*:*:*:*
Original advisory text
Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-120Classic Buffer Overflow
Timeline
Published8 Oct 2026
Updated15 Oct 2026
First seen8 Oct 2026
Sources
CVE-2026-84246 · NVD
CVE-2026-84246 · MITRE
Track software like this
Free during beta