Loading market data...
← Back to CVE feed

CVE-2026-82340

CRITICAL CVSS 9.8 View on NVD ↗

Description

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Sep 18, 2026 20:17 UTC Modified: Sep 19, 2026 15:17 UTC