CVE-2026-4921
LOWCVSS 2.7/10
Last modified
CVE-2026-4921 is a low-severity vulnerability rated 2.7/10 on the CVSS scale. IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system..
Description
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| IBM | Guardium Data Protection | 12.2 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-4921?
IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
How severe is CVE-2026-4921?
CVE-2026-4921 has a CVSS score of 2.7/10 (LOW severity).
How do I fix CVE-2026-4921?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-49202Internal multimedia session archives are accessible without …8.6
- CVE-2026-49203Crucial management API endpoints for cellular eSIM allocatio…8.3
- CVE-2026-49204Leftover debug modules contain fixed credentials for interna…6.5
- CVE-2026-49205phpMyFAQ is an open source FAQ web application. Versions pri…6.5
- CVE-2026-49208Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0…5.3
- CVE-2026-49209Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0…6.5
- CVE-2026-49210Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0…6.1
- CVE-2026-49211Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0…7.5
- CVE-2026-49212Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0…7.5
- CVE-2026-49213TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot'…8.1
- CVE-2026-49214guzzlehttp/psr7 is a PSR-7 HTTP message library implementati…5.3
- CVE-2026-49215Symfony UX is a JavaScript ecosystem for Symfony. From 2.22.…5.4
Are you affected by CVE-2026-4921?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST