CVE-2026-81937

Katalog CVE

CVSS 7.2 · High EPSS 1,5%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada ibm guardium data protection. Skor CVSS 3.1 7.2 (High) menurut us.ibm.com.

Deskripsi (NVD)

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root privileges and impact to the confidentiality, integrity, and availability of the affected system.

Rincian

Terbit di NVD

18 September 2026

Terakhir diubah

6 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber us.ibm.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7288040 patch · advisory vendor