CVE-2026-84071

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2

Description An OS command injection flaw exists in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in arbitrary command execution with root-level privileges.

Recommendations Restrict access to the Universal Connector plugin upload functionality and monitor for suspicious activity. At the moment, there is no information about a newer version that contains a fix for this vulnerability.