What is CVE-2026-84034?

CVE-2026-84034 is a high-severity vulnerability in IBM Guardium Data Protection, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2026-09-18.

How severe is CVE-2026-84034?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in IBM Guardium Data Protection

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ibm Guardium Data Protection — versions 12.2

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-84034?: CVE-2026-84034 is a high-severity vulnerability in IBM Guardium Data Protection, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2026-09-18.
How severe is CVE-2026-84034?: High severity. CVSS v3 base score is 8.8 out of 10.