CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.

  • Published Sep 18, 2026
  • CVSS 8.8 high
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-84034 at the National Vulnerability Database