# CVE-2026-82892

RCE via OS command injection in IBM Guardium Data Protection 12.2

- Page: https://www.vulneraibility.com/cve/CVE-2026-82892
- CVSS: 8.1
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.62% (percentile 49.7)
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2026-09-22)
- Weakness: CWE-78
- Published: 2026-09-18

## Affected versions

- IBM Guardium Data Protection: affected 12.2

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote OS command execution allows attackers to run arbitrary commands as the app user, enabling system compromise, data access, or lateral movement.

## Action

Immediate action required

## Recommendation

Apply IBM's security update for Guardium 12.2 immediately; isolate appliances and rotate credentials.

## References

- [patch] https://www.ibm.com/support/pages/node/7288035

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.