Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-1726 EUVD-2026-25127GHSA-26px-prvq-fgpx

Multiple Vulnerabilities in IBM Guardium Key Lifecycle Manager

Published Apr 22, 2026 · Updated Jun 11, 2026 · Assigned by ibm

Description

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations after being demoted. Attackers could access sensitive data, modify system configurations, or change permissions for other users. The issue undermines administrative controls and could lead to data breaches, system compromise, and loss of trust in the application's security mechanisms.

Affected products

VendorProductAffectedFixed
IBM Guardium Key Lifecycle Manager 4.1.0, 4.1.1, 4.2.0, 4.2.1, 5.0.0, 5.1.0 —

References