CVE-2026-84884
IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.
- Published Sep 25, 2026
- CVSS 7.5 high
- 0.2% chance of exploitation in the next 30 days (EPSS)