CVE-2026-1274
MEDIUMIBM Guardium Data Protection is affected by multiple vulnerabilities
Title source: cnaDescription
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
patch
https://www.ibm.com/support/pages/node/7269445
Scores
CVSS v3
4.9
EPSS
0.0001
EPSS Percentile
1.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-840
Status
published
Products (6)
IBM/Guardium Data Protection
12.0 - 9.6.0
IBM/Guardium Data Protection
12.1
IBM/Guardium Data Protection
12.2
ibm/guardium_data_protection
12.0
ibm/guardium_data_protection
12.1
ibm/guardium_data_protection
12.2
Published
Apr 23, 2026
Tracked Since
Apr 23, 2026