IBM Guardium Data Protection Sniffer Multiple Vulnerabilities Advisory (CVE-2026)

Vulnerability Overview Multiple security vulnerabilities exist in the Sniffer component of IBM Guardium Data Protection, specifically including: 1. CVE-2026-75875: Path traversal vulnerability allowing remote attackers to execute arbitrary code. 2. CVE-2026-80381: SQL injection vulnerability allowing remote attackers to execute unauthorized SQL statements. 3. CVE-2026-81932: SQL injection vulnerability allowing remote unauthenticated attackers to view, add, modify, or delete information in the backend database. 4. CVE-2026-82335: Heap overflow vulnerability in the MongoDB protocol parser, potentially leading to denial of service or arbitrary code execution. 5. CVE-2026-84424: Improper restrictions on memory buffer operations, potentially leading to arbitrary code execution. 6. CVE-2026-84058: Buffer overflow vulnerability in the TDS packet decoder, potentially leading to denial of service or arbitrary code execution. 7. CVE-2026-84035: Stack overflow vulnerability, potentially leading to arbitrary code execution. 8. CVE-2026-84875: Buffer overflow vulnerability, potentially leading to arbitrary code execution. 9. CVE-2026-84198: Buffer overflow vulnerability, potentially leading to arbitrary code execution. 10. CVE-2026-84246: Buffer overflow vulnerability, potentially leading to arbitrary code execution. 11. CVE-2026-82895: Buffer overflow vulnerability, potentially leading to arbitrary code execution. Scope of Impact Affected Product: IBM Guardium Data Protection Affected Versions: 12.0, 12.1, 12.2 Affected Component: Sniffer component Remediation IBM strongly recommends that all users of affected versions immediately apply the latest IBM Guardium Data Protection Sniffer patch. The patch can be obtained via the following link: Additional Information CVSS Score: The CVSS base scores for the respective vulnerabilities range from 5.9 to 9.8. Operating System: Linux Document Number: 7291674 Last Modified Date: October 8, 2026 Initial Release Date: October 8, 2026 Disclaimer The CVSS scores provided by IBM are based on industry open standards and are intended to convey vulnerability severity and response priority. IBM provides no express or implied warranties; users are responsible for assessing the impact of the vulnerabilities on their own environments.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Guardium Data Protection Sniffer Multiple Vulnerabilities Advisory (CVE-2026)

More from this source