Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-80441

IBM Guardium Data Protection is affected by multiple vulnerabilities.

CVSS 3.1 9.8 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-80441

Published

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting in compromise of the confidentiality, integrity, and availability of the affected system.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-80441

Published

Guardium Data Protection

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "IBM",
                    "product": "Guardium Data Protection",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "12.2"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*",
                        "cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON