---
id: CVE-2026-82891
title: IBM Guardium Data Protection is affected by a security vulnerability
summary: >-
  IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to
  obtain sensitive information due to use of a hard-coded cryptographic key.
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-321
vendor: IBM
product: Guardium Data Protection
affected:
  - guardium_data_protection 12.1
  - guardium_data_protection 12.2
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T21:55:01.289Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-82891'
references:
  - url: 'https://www.ibm.com/support/pages/node/7293014'
tags:
  - cve.org
ingestedAt: '2026-10-20T22:23:33.694Z'
---

## Overview

IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key.

## Affected

- `guardium_data_protection 12.1`
- `guardium_data_protection 12.2`

## Remediation

IBM encourages customers to update their systems promptly.





















































 ProductVersions FixIBM Guardium Data Protection12.1 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=All&platform=All&function=fixId&fixids=SqlGuard_12.0p150_Bundle&includeSupersedes=0&source=fc IBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p233_FixPack&includeSupersedes=0&source=fc