Reference page — cumulative record through Saturday, October 3, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0074 52.9 —
AFFECTED Product Versions Fixed Guardium Data Protection 12.2 – —
TIMELINE Sep 1 Reserved by ibm Sep 29 Published (CNA: ibm) Oct 1 RESCORED — CVE-2026-84440 (IBM Guardium Data Protection). CVSS 7.5 → 8.8 (NVD).
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.
| Date | Event | Detail |
|---|---|---|
| September 1, 2026 | Reserved | Reserved by ibm |
| September 29, 2026 | Published | Published (CNA: ibm) |
| October 1, 2026 | RESCORED | RESCORED — CVE-2026-84440 (IBM Guardium Data Protection). CVSS 7.5 → 8.8 (NVD). |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| IBM | Guardium Data Protection | — | 12.2 | — |
Authoritative record: CVE-2026-84440 at cve.org
Vendors: ibm
Weaknesses: CWE-78
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-84440 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Saturday, October 3, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
