Is CVE-2026-82340 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82340?

CVE-2026-82340 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-82340

Description

IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.