Is CVE-2026-84278 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84278?

CVE-2026-84278 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-84278

Description

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.