CVE-2026-84083
published 2026-09-18CVE-2026-84083: IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local…
PriorityP348high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.11%
1.7th percentile
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | guardium_data_protection | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance.
ghsa_unreviewed·2026-09-18
CVE-2026-84083 [HIGH] CWE-269 IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance.
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.
VulDB
IBM Guardium Data Protection 12.2 nmap_wrapper privileges management
vuldb·2026-09-18·CVSS 7.8
CVE-2026-84083 [HIGH] IBM Guardium Data Protection 12.2 nmap_wrapper privileges management
A vulnerability was found in IBM Guardium Data Protection 12.2 and classified as very critical. Affected by this issue is some unknown functionality of the component nmap_wrapper. Executing a manipulation can lead to improper privilege management.
This vulnerability is tracked as CVE-2026-84083. The attack is restricted to local execution. No exploit exists.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-18
Published