PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-84247 IBM CVE debrief

IBM Guardium Data Protection 12.2 is vulnerable to a path traversal attack, allowing a remote authenticated attacker to cause a denial of service. The vulnerability affects IBM Guardium Data Protection deployments, which defenders should assess for potential exposure and impact. The CVE record was published on 2026-10-08T21:27:59.212Z and was last modified on 2026-10-09T14:50:07.355Z. The NVD entry is currently HIGH. Defenders should verify exposure and assess potential impact on Guardium Data Protection 12.2 deployments due to this path traversal vulnerability.

Vendor
IBM
Product
Guardium Data Protection
CVSS
HIGH 8.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-08
Original CVE updated
2026-10-09
Advisory published
2026-10-08
Advisory updated
2026-10-09

Who should care

Defenders responsible for IBM Guardium Data Protection 12.2 deployments, vulnerability management teams, and security teams should assess potential exposure and impact. They should prioritize verifying exposure, assessing potential impact on Guardium Data Protection 12.2 deployments, and reviewing and applying vendor-provided patches or updates to mitigate the vulnerability.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact on Guardium Data Protection 12.2 deployments due to a path traversal vulnerability allowing a denial of service.

  • Potential denial of service impact on critical systems
  • Need to verify exposure and assess potential impact on Guardium Data Protection 12.2 deployments
  • Priority on reviewing and applying vendor-provided patches or updates

Technical summary

IBM Guardium Data Protection 12.2 is vulnerable to a path traversal attack, allowing a remote authenticated attacker to cause a denial of service. The vulnerability affects IBM Guardium Data Protection deployments, requiring defenders to assess potential exposure and impact. The path traversal vulnerability could lead to a denial of service, emphasizing the need for defenders to verify exposure and apply necessary patches or updates.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact on Guardium Data Protection 12.2 deployments.

Recommended defensive actions

  • Verify Guardium Data Protection 12.2 deployments for potential exposure
  • Assess the impact of a denial of service on critical systems
  • Review and apply vendor-provided patches or updates

Evidence notes

The CVE record and source item provide details on the vulnerability, but additional verification is needed to confirm affected versions and potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-84247 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-84247

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-84247 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-84247

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.