3 CVEs publicados el 2026-10-09 · CVSS máximo 9.8/10.
Producto afectado
IBM Guardium Data Protection 12.2
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2026-84249 | CRITICAL | 9.8 | — | IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function. | |
| CVE-2026-84250 | HIGH | 8.4 | — | IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. | |
| CVE-2026-84245 | HIGH | 7.8 | — | IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. |