CVE-2026-81626— IBM Guardium Data Protection is affected by multiple vulnerabilities.
Quick assessment
Affected
IBM Guardium Data Protection
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IBM Guardium 数据保护软件 12.2 版本在负载均衡器组（Load Balancer Groups）组件中存在 SQL 注入漏洞。未经身份验证的用户可以通过负载均衡器 Servlet 端点注入 SQL 语句，可能导致未授权访问数据，并影响受影响系统的机密性、完整性和可用性。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Guardium Data Protection | 12.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81626
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Guardium Data Protection is affected by multiple vulnerabilities.
Source: CVE Program / CVE List V5
Vulnerability Description
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component. An unauthenticated user can inject SQL statements through the Load Balancer Servlet endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | Guardium Data Protection | 12.2 |
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-81626
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81626
请登录查看更多情报信息。
Other References for CVE-2026-81626 (1)
Same Patch Batch · IBM · 2026-09-18 · 90 CVEs total
| CVE-2026-10747 | 10.0 CRITICAL | IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message p |
| CVE-2025-15399 | 10.0 CRITICAL | Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a |
| CVE-2026-84064 | 9.9 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-10858 | 9.9 CRITICAL | IBM MQ for HPE NonStop is vulnerable to a denial of service attack |
| CVE-2026-84075 | 9.9 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-80442 | 9.9 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-84078 | 9.9 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-82967 | 9.8 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-80441 | 9.8 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-81657 | 9.8 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-84082 | 9.8 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-82340 | 9.8 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-82832 | 9.6 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-75878 | 9.1 CRITICAL | IBM Sterling File Gateway is Vulnerable to Authentication Bypass |
| CVE-2026-84073 | 9.1 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-84031 | 9.0 CRITICAL | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-84070 | 8.9 HIGH | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-84106 | 8.9 HIGH | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-84074 | 8.9 HIGH | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
| CVE-2026-82887 | 8.8 HIGH | IBM Guardium Data Protection is affected by multiple vulnerabilities. |
Showing top 20 of 90 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Guardium Data Protection
-
CVE-2026-84239
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84241
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84108
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84106
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84105
IBM Guardium Data Protection is affected by multiple vulnera
Same vendor: IBM
-
CVE-2026-84239
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84241
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84108
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84106
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84105
IBM Guardium Data Protection is affected by multiple vulnera
Same weakness: CWE-89
-
CVE-2026-76899
CordysCRM: Authenticated SQL injection via `sort.name` on `P -
CVE-2026-84239
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-84105
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-52745
CordysCRM: Customer Public Pool Sorting Field SQL Injection -
CVE-2026-84082
IBM Guardium Data Protection is affected by multiple vulnera
V. Comments for CVE-2026-81626
No comments yet