Threat level Severe
Contact
Critical 9.8Patch available
CVE-2026-80381

IBM Guardium Data Protection — SQL injection.

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.

WeaknessCWE-89: SQL injection
Published Updated Source NVD
Read vendor advisoryView on NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
0.3%
Higher than 23% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Available
See the vendor advisory

What happened

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.

What to do

  1. 01Check whether you run IBM Guardium Data Protection, and which version.
  2. 02Install the fixed version listed in the vendor advisory.

References

Timeline · UTC

  1. Published to NVD
  2. NVD record updated

Also actively exploited

CVE-2026-764188.6Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCVE-2026-1146259.9Arista VeloCloud OrchestratorCVE-2026-1114979.8Google Brotli
Vendor
IBM47 CVEs in 30 days
All IBM CVEs

Other CVEs in IBM Guardium Data Protection

16 more CVEs

All IBM Guardium Data Protection CVEs
9.8IBM Guardium Data Protection — missing authentication.EPSS 0.4%9.8IBM Guardium Data Protection — remote code execution.EPSS 0.4%9.8IBM Guardium Data Protection — remote code execution.EPSS 0.4%9.8IBM Guardium Data Protection — remote code execution.EPSS 0.4%9.8IBM Guardium Data Protection — remote code execution.EPSS 0.4%9.8IBM Guardium Data Protection — remote code execution.EPSS 0.4%