Is CVE-2026-85542 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85542?

CVE-2026-85542 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-85542

Description

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.