CVE-2026-75875 – IBM Guardium Data Protection

CVSS 9.8 CRITICAL [2] Critical – Same Day Deployment

“When the platform built to guard your databases becomes the open door, every record it watches is already exposed.”

IBM has released fixes for 60 vulnerabilities in IBM Guardium Data Protection 12.0, 12.1 and 12.2. All 60 are rated Critical or High. Remote attackers can use these flaws to run code without logging in, read and change data through SQL injection, and skip authentication on the management interface and internal servlets. Local users can gain root access to Collector and Central Manager appliances. Many of the flaws need no credentials, so any Guardium system that can be reached over the network is at serious risk.

Critical: CVE-2026-80442, CVE-2026-84064, CVE-2026-84075 and CVE-2026-84078 each have a CVSS score of 9.9, Critical severity. CVE-2026-75875, CVE-2026-80381, CVE-2026-80441, CVE-2026-81657, CVE-2026-82340, CVE-2026-82967, CVE-2026-84082, CVE-2026-84249 and CVE-2026-84272 each have a CVSS score of 9.8, Critical severity. CVE-2026-82832 has a CVSS score of 9.6, Critical severity. CVE-2026-84244 has a CVSS score of 9.3, Critical severity. CVE-2026-84073 and CVE-2026-84436 each have a CVSS score of 9.1, Critical severity. CVE-2026-84031 has a CVSS score of 9.0, Critical severity.

High: CVE-2026-82885, CVE-2026-82887, CVE-2026-84034 and CVE-2026-85542 each have a CVSS score of 8.8, High severity. CVE-2026-84250 has a CVSS score of 8.4, High severity. CVE-2026-82334, CVE-2026-82335, CVE-2026-82344, CVE-2026-82892, CVE-2026-82895, CVE-2026-82900, CVE-2026-84035, CVE-2026-84057, CVE-2026-84058, CVE-2026-84081, CVE-2026-84085, CVE-2026-84198, CVE-2026-84241, CVE-2026-84246, CVE-2026-84247 and CVE-2026-84842 each have a CVSS score of 8.1, High severity. CVE-2026-82893, CVE-2026-84083, CVE-2026-84089, CVE-2026-84245 and CVE-2026-84271 each have a CVSS score of 7.8, High severity. CVE-2026-82896 and CVE-2026-84076 each have a CVSS score of 7.6, High severity. CVE-2026-84230, CVE-2026-84275, CVE-2026-84440, CVE-2026-84875, CVE-2026-84882 and CVE-2026-85029 each have a CVSS score of 7.5, High severity. CVE-2026-84036 has a CVSS score of 7.4, High severity. CVE-2026-81669, CVE-2026-81937, CVE-2026-84071, CVE-2026-84086, CVE-2026-84278, CVE-2026-84422 and CVE-2026-84862 each have a CVSS score of 7.2, High severity.

Key Details

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
CWE Classification: CWE-22

Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.