Guardium Data Protection EUVD-2026-95331

The only prerequisite stated by IBM is network reachability to IBM Guardium Data Protection 12.2.2 or 12.1 and the ability to supply input that reaches an OS command without neutralization of special elements (CWE-78); no non-default feature or configuration toggle is named in the description. The practical limiting factor is deployment context: Guardium is a data-security appliance normally placed on internal/management networks rather than internet-facing, substantially narrowing the realistic attacker population despite the AV:N rating. A secondary unresolved limit is authentication - CVSS asserts PR:N (none), but IBM's text does not confirm whether reaching the vulnerable command path requires a valid console/API session; defenders should verify this against IBM advisory node 7288832 before treating it as fully unauthenticated.

Signals are mixed. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) describes a trivially exploitable, network-reachable, unauthenticated OS command injection with total technical impact (C:H/I:H/A:H), yielding a CRITICAL 9.8 - and SSVC agrees on Technical Impact: total. However, the forward-looking exploitation signals do NOT corroborate an emergency: EPSS is only 0.36% (28th percentile), the CVE is NOT in CISA KEV, no public exploit code is identified, and CISA SSVC records Exploitation: none and Automatable: no. The low EPSS and SSVC 'not automatable' rating are consistent with a product that is not mass-scanned on the open internet (Guardium is an internal database-activity-monitoring appliance), so despite the 9.8 this is better characterized as a high-value-but-not-yet-exploited patch-soon issue rather than a drop-everything actively-exploited threat. One tension to verify: CVSS marks PR:N (unauthenticated), yet the IBM description only says 'remote attacker' without confirming the authentication context - command-injection flaws in Guardium's management interface often require some authenticated access, so the true PR should be confirmed against IBM advisory node 7288832. A patch is available, which is the decisive mitigating fact.

A remote attacker with network access to the Guardium Data Protection management interface submits input containing shell metacharacters into a field that is passed to an OS command without proper neutralization (CWE-78), causing arbitrary commands to execute on the appliance. Given AV:N/AC:L, no special timing or race is needed, but no public proof-of-concept exists and exploitation would require reachability to the appliance, which is typically deployed on internal/management networks. Successful exploitation yields full command execution with the privileges of the Guardium service.