Vulnerability Details CVE-2026-84058
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 27.9%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-84058
-
cpe:2.3:a:ibm:guardium_data_protection:12.0
-
cpe:2.3:a:ibm:guardium_data_protection:12.1
-
cpe:2.3:a:ibm:guardium_data_protection:12.2