CVE-2026-84274

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.

• CWE-200

• https://www.ibm.com/support/pages/node/7288627Vendor Advisory

Published

Oct 8, 2026

Last Modified

Oct 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-84268A flaw was found in the SFTP backend in gvfs. When mounting …8.8
• CVE-2026-84269A flaw was found in the AFP backend in gvfs. When mounting a…6.5
• CVE-2026-8427Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Requ…8.8
• CVE-2026-84270A flaw was found in the MTP backend in gvfs. When reading a …4.3
• CVE-2026-84271IBM Guardium Data Protection 12.2 is vulnerable to a signatu…7.8
• CVE-2026-84272IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable …9.8
• CVE-2026-84275IBM Guardium Data Protection 12.2 is vulnerable to path trav…7.5
• CVE-2026-84276IBM Guardium Data Protection 12.2.2 is affected by a denial-…7.5
• CVE-2026-84278IBM Guardium Data Protection 12.2 is affected by a command i…7.2
• CVE-2026-84279The Fancy Product Designer plugin for WordPress is vulnerabl…7.2
• CVE-2026-8428Concrete CMS 9.5.0 and below emits a CSRF token in the local…8.8
• CVE-2026-84280The Fancy Product Designer plugin for WordPress is vulnerabl…7.2