CVE-2026-84272
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.40%
- 32th pct
- KEV
- No
- Class
- other
- CWE-306
Description
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.
References
Status: profiled · ingested 2026-10-09T18:00:43.000Z