High · 7.5 CVE-2026-84275 EUVD-2026-95235GHSA-grpw-v5ph-4mw4

IBM Guardium Data Protection Path Traversal

Published Oct 8, 2026 · Updated Oct 12, 2026 · Assigned by ibm

Vendor: IBM Product: Guardium Data Protection

Description

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.

Affected products

Vendor	Product	Affected	Fixed
IBM	Guardium Data Protection	12.2	—

References

https://www.ibm.com/support/pages/node/7288035 vendor-advisory patch