Vulnerability intelligence

CVE-2026-84078

IBM Guardium Data Protection CWE-306

IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An unauthenticated user can access privileged load-balancer operations, potentially resulting in unauthorized actions and impact to the integrity and availability of the affected system.

CVSS Score

9.9

Critical

EPSS — Exploit Probability

0.3%

Riskier than 21% of all CVEs · checked 2026-09-21

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published