CVE-2026-85542 — IBM Guardium Data Protection is affected by multiple vulnerabilities.

CVE-2026-85542

IBM Guardium Data Protection is affected by multiple vulnerabilities. PUBLISHED

Description (CNA)

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.

Affected (CNA)

Vendor / product	Versions
IBM / Guardium Data Protection	affected 12.2

CWE

CWE-78

References

https://www.ibm.com/support/pages/node/7288035

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.