Soon75High7.5VulnerabilityCVE-2026-84275No patch link observed

CVE-2026-84275 — IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality.

Published Oct 8, 2026, 08:17 PM UTCIngested 45m agoSource NVD(cve-db)CVE-2026-84275

Description

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

Network

Attack Vector

Low

Attack Complexity

None

Privileges Required

None

User Interaction

Unchanged

Scope

High

Confidentiality

None

Integrity

None

Availability

References

advisory[email protected]https://www.ibm.com/support/pages/node/7288035

Related threats

same CWE or vendor

High

CVE-2026-107377 — datamodel-code-generator generates Python data models from schema definitions.

CVE-2026-107377 · 4h ago

Medium

PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

CVE-2026-61431 · 4h ago

Medium

PraisonAI: Project custom command templates can read outside-workspace files into model prompts

CVE-2026-60088 · 4h ago

High

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

CVE-2026-61443 · 5h ago

Medium

PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

CVE-2026-61432 · 5h ago

Medium

PraisonAI: Project config can auto-save agent output outside the project root

CVE-2026-60089 · 5h ago