CVE-2026-84436

Critical · CVSS 9.1

CVSS: 9.1; nvd
EPSS: 0.68%; 51th pct
KEV: No
Class: kernel local; CWE-78

Description

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.

References

https://www.ibm.com/support/pages/node/7288040

Status: profiled · ingested 2026-10-02T18:00:02.000Z