PT-2026-95630 · Ibm · Guardium Data Protection
CVE-2026-82340
·
Published
2026-09-18
·
Updated
2026-10-03
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Guardium Data Protection version 12.2
Description
The Change Audit System (CAS) listener is subject to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch. A network attacker with access to TCP port 16017 can send specially crafted serialized messages to potentially execute arbitrary code on the appliance.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Guardium Data Protection