HIGH 8.8 NVD

CVE-2026-85542

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.

References

https://www.ibm.com/support/pages/node/7288035

Published: 2026-09-25 · Source: NVD · Feed updated: 2026-09-25

This high severity vulnerability with a CVSS score of 8.8 was published on 2026-09-25 via NVD.

vulnfeed aggregates 11443 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.