GCVE-110-NCSC-2026-433

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published October 16, 2026

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a path traversal vulnerability that enables remote attackers to execute arbitrary code on affected systems.

Download JSON Open in Console

Weaknesses (CWE)

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-787Out-of-bounds WriteCWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-121Stack-based Buffer Overflow

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
IBM	vers:unknown/*	—	—

Aliases

CVE-2026-75875 CVE-2026-80381 CVE-2026-81932 CVE-2026-82335 CVE-2026-82895 CVE-2026-84035 CVE-2026-84058 CVE-2026-84198 CVE-2026-84246 CVE-2026-84875

References

advisory

Browse GCVE Records

5,487 records in the GCVE database · Updated October 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON