{"id":"CVE-2026-82891","title":"IBM Guardium Data Protection is affected by a security vulnerability","summary":"IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-321"],"vendor":"IBM","product":"Guardium Data Protection","affected":["guardium_data_protection 12.1","guardium_data_protection 12.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-22T23:04:19.469455Z"},"published":"2026-10-20","updated":"2026-10-23","sourceUpdated":"2026-10-23T11:02:18.650Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-82891","references":[{"url":"https://www.ibm.com/support/pages/node/7293014"}],"tags":["cve.org"],"epss":0.00504,"epssPercentile":0.42884,"ingestedAt":"2026-10-20T22:23:33.694Z","slug":"CVE-2026-82891","body":"## Overview\n\nIBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.\n\n## Affected\n\n- `guardium_data_protection 12.1`\n- `guardium_data_protection 12.2`\n\n## Remediation\n\nIBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ProductVersions FixIBM Guardium Data Protection12.1 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=All&platform=All&function=fixId&fixids=SqlGuard_12.0p150_Bundle&includeSupersedes=0&source=fc IBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p233_FixPack&includeSupersedes=0&source=fc","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}