CVE-2026-81623
HIGHCVSS 8.8/10EPSS 0.34%
Last modified
CVE-2026-81623 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Guardium Data Protection | 12.2 |
References
- https://www.ibm.com/support/pages/node/7288040Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-81623?
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input.
How severe is CVE-2026-81623?
CVE-2026-81623 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2026-81623?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-81581Improper validation of memory boundaries in WibuKey64.sys of…8.8
- CVE-2026-81583The My Login WordPress plugin before 7.2.0 does not enforce…5.4
- CVE-2026-81584An improper neutralization of special elements used in an SQ…8.1
- CVE-2026-8159multiparty@4.2.3 and lower versions are vulnerable to denial…7.5
- CVE-2026-8161multiparty@4.2.3 and lower versions are vulnerable to denial…7.5
- CVE-2026-8162multiparty@4.2.3 and lower versions are vulnerable to denial…7.5
- CVE-2026-81624Undertow is a flexible performant web server used in JBoss E…7.5
- CVE-2026-81625A remote attacker with user privileges may use a malicious o…8.8
- CVE-2026-81626IBM Guardium Data Protection 12.2 is vulnerable to a SQL inj…8.6
- CVE-2026-81627A flaw was found in QEMU. The VAPIC setup hypercall in hw/i3…8.2
- CVE-2026-8163The Infility Global WordPress plugin before 2.15.19 does not…8.8
- CVE-2026-81630The Botslab G980H dash camera firmware does not adequately v…8.1
Are you affected by CVE-2026-81623?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST