CVE-2026-85542
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Sep 25, 2026
Vendor
unknown
Description
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.