9.8
Critical
CVE-2026-84272 IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component
Description
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection | 12.2.2 | No fix stated |
| Guardium Data Protection | 12.1 | No fix stated |
Other CVEs of Guardium Data Protection
The 97 CVEs of Guardium Data Protection →
CVE-2026-84237
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84229
IBM Guardium Data Protection is affected by multiple vulnerabilities
6.5
Medium
CVE-2026-84228
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84030
IBM Guardium Data Protection is affected by multiple vulnerabilities
5.6
Medium