CVE-2026-80441

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2

Description An unauthenticated second-order SQL injection exists in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker can inject malicious SQL that the application later processes, which may compromise the confidentiality, integrity, and availability of the system. Second-order SQL injection occurs when malicious input is stored by the application and later executed as a query in a different part of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.