CVE-2026-82340

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.

  • Published Sep 18, 2026
  • CVSS 9.8 critical
  • 0.7% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-82340 at the National Vulnerability Database