CVE-2026-81656

IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged authenticated user can inject SQL statements through the newQueryBuilder REST endpoint, potentially resulting in unauthorized access to data and impact to the confidentiality, integrity, and availability of the affected system.

Score
CVSS 3.1 8.8 High
Status
Analyzed - psirt@us.ibm.com
Published
2026-09-18
Last modified
2026-10-06
Weaknesses
CWE-89

Affected products

References

 
 
© AVABIS GmbH privacypolicy about