Patchfirst
Patchfirst
CVE-2026-84058 Critical · 9.8 EPSS 0.4%

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server)…

IBM · Guardium Data Protection

Summary

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contains a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. An attacker who can send a specially crafted TDS PRELOGIN packet over a network monitored by an IBM Guardium Collector, without authentication or user interaction, may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

Official description · NVD

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

Breakdown
15.7 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 8 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 12 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Vendor Advisory 1

ibm.com/support/pages/node/7291674
↑ ↓ chooseEnter openEsc close