Denial-of-Service Vulnerability in IBM Guardium Data Protection

IBM Guardium Data Protection version 12.2.2 contains a high-severity denial-of-service (DoS) vulnerability identified as CVE-2026-84276. The vulnerability exists within the edge-controller component. An unauthenticated remote attacker with network connectivity to the edge-controller gRPC service can transmit specifically crafted, malformed task data to the application. Due to an unchecked type assertion within the code handling these gRPC requests, the edge-controller process encounters an unhandled exception and terminates unexpectedly. This disruption impacts the availability of the data protection services managed by the edge-controller. Defenders should monitor for unexpected restarts of the edge-controller process and restrict access to the gRPC service to known, trusted infrastructure.

Impact

Successful exploitation of this vulnerability results in an immediate service disruption of the edge-controller component within IBM Guardium Data Protection 12.2.2. Organizations relying on this platform for sensitive data protection and monitoring will lose visibility and security enforcement during the period of service unavailability. This vulnerability is particularly critical for environments where the edge-controller is internet-exposed or reachable from untrusted network segments.

Recommendation

Prioritize patching for all affected IBM Guardium Data Protection 12.2.2 installations to the version addressing CVE-2026-84276. In the interim, restrict network access to the gRPC service associated with the edge-controller to only trusted management subnets using network firewalls or ACLs. Audit infrastructure logs for repeated crash events or unexpected service restarts of the edge-controller process.