NVD HIGH: CVE-2026-81932 — IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection...

Thursday, October 8, 2026 at 10:17 PM UTC·Source: NIST NVD

Updated: Friday, October 9, 2026 at 03:00 AM UTC

Executive Summary

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-81932

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

The journey of a paper unicorn: adventures inside a modern warehouse

Kaspersky experts explain the security issues affecting warehouse environments. We break down initial access vectors specific to warehouses, and discuss the impact of a compromise.

1h agoSecurelist (Kaspersky)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-77936 — Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECU...

Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/run, manage /v1/admin users, or run OS commands via COPY PROGRAM.

CVE-2026-77936

6h agoNIST NVD

CRITICALVulnerability

NVD CRITICAL: CVE-2026-77933 — DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its defau...

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access including FILE and SUPER privileges.

CVE-2026-77933

6h agoNIST NVD