IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root privileges and impact to the confidentiality, integrity, and availability of the affected system.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7288040 | Patch Vendor Advisory |
Configurations
History
06 Oct 2026, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm guardium Data Protection |
|
| CPE | cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:* | |
| References | () https://www.ibm.com/support/pages/node/7288040 - Patch, Vendor Advisory |
18 Sep 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-18 20:17
Updated : 2026-10-06 16:23
NVD link : CVE-2026-81937
Mitre link : CVE-2026-81937
CVE.ORG link : CVE-2026-81937
JSON object : View
Products Affected
ibm
- guardium_data_protection
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')