IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7288040 | Patch Vendor Advisory |
Configurations
History
06 Oct 2026, 14:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.ibm.com/support/pages/node/7288040 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:* | |
| First Time |
Ibm
Ibm guardium Data Protection |
18 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-18 20:17
Updated : 2026-10-06 14:13
NVD link : CVE-2026-81669
Mitre link : CVE-2026-81669
CVE.ORG link : CVE-2026-81669
JSON object : View
Products Affected
ibm
- guardium_data_protection
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')