CVE-2026-84893

MediumCVSS 6.5/10Last modified Oct 20, 2026

Description

IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
IBMGuardium Data Protection12.2

References

Timeline

Published
Sep 25, 2026
Last modified
Oct 20, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-848947.5In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidateCVE-2026-848957.3In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSeCVE-2026-848966.8The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTMCVE-2026-848975.3src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP CVE-2026-848986.6The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowiCVE-2026-848996.8The VikWidgetsLoader WordPress plugin before 1.12.0 does not sanitise or escape a block attribute before outputting it inside an inline scrCVE-2026-849006.8Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPrCVE-2026-849014.9The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing uCVE-2026-849026.8The King Addons for Elementor WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template CVE-2026-849032.7The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before renderCVE-2026-849043.8The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimizaCVE-2026-849052.7The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a speaker, allowing users wit
CVE-2026-84893: Medium severity, CVSS 6.5 | Vulnix