Vulnerability Intelligence

Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.

Published records349
Critical309
High30
Known exploited77

CVE-2026-14508

Critical9.1

Ibm Datapower Gateway >= 10.5.0.0, < 10.5.0.23

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due…

Use after freeRemote (network)No login neededNo user action

CVE-2026-82334

Critical9.1

Ibm Guardium Data Protection 12.0

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid…

Out-of-bounds readRemote (network)No login neededNo user action

CVE-2026-82900

Critical9.1

Ibm Guardium Data Protection 12.1

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.

Path traversalRemote (network)No login neededNo user action

CVE-2026-84057

Critical9.8

Ibm Guardium Data Protection 12.1

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

OS command injectionRemote (network)No login neededNo user action

CVE-2026-84058

Critical9.8

Ibm Guardium Data Protection >= 12.0, <= 12.2

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS…

Memory corruptionRemote (network)No login neededNo user action

CVE-2026-84035

Critical9.8

Ibm Guardium Data Protection >= 12.0, <= 12.2

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

Stack buffer overflowRemote (network)No login neededNo user action

CVE-2026-82895

Critical9.8

Ibm Guardium Data Protection >= 12.0, <= 12.2

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

Buffer overflowRemote (network)No login neededNo user action

CVE-2026-84198

Critical9.8

Ibm Guardium Data Protection >= 12.0, <= 12.2

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

Buffer overflowRemote (network)No login neededNo user action

CVE-2026-84209

Critical9.8

Ibm Guardium Data Protection 12.1

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.

SQL injectionRemote (network)No login neededNo user action

CVE-2026-81932

Critical9.8

Ibm Guardium Data Protection >= 12.0, <= 12.2

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or…

SQL injectionRemote (network)No login neededNo user action