Vulnerability · Published Oct 8, 2026 · Assigned by ibm

CVE-2026-84290Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data Protection

Medium 5.1

In plain English

A medium-severity memory corruption in Guardium Data Protection from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)5.1Medium

Exploit odds (30 days)0.1%top 98.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.

Affected products (as reported)

Vendor	Product	Versions
IBM	Guardium Data Protection	12.012.112.2

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H

References

https://www.ibm.com/support/pages/node/7291676 vendor-advisory, patch