CVE-2026-82340

Critical · CVSS 9.8

CVSS: 9.8; nvd
EPSS: 0.69%; 51th pct
KEV: No
Class: other; CWE-94

Description

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.

References

https://www.ibm.com/support/pages/node/7288040

Status: profiled · ingested 2026-10-06T18:00:43.000Z