HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-82335 — IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buff...

·Source: NIST NVD

Updated:

Executive Summary

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.

Analysis

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution. CVSS Score: 8.1. Published: 2026-10-08T20:17:36.873.

Indicators of Compromise (1)

CVE (1)
CVE-2026-82335
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Fraudsters Clone Bank Support Pages, Urge Victims to Call

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fraudsters-clone-bank-support-pages-urge-victims-to-call-image_small-6-a-33149.jpg" align=right hspace=4><b>Phone-Led Fraud Ring Pushes Legitimate Remote-Support Tools to Ransack Systems</b><br>A campaign running since March and tied to phone-savvy fraudsters has been tricking targets into phoning a fake call center and directing

Bank Info Security
MEDIUMVulnerabilityNEW

NatWest orders 30,000 staff to spend more time in the office

UK banking giant NatWest has told tens of thousands of employees to spend more time in the office in a move described as a "kick in the teeth" by union Unite.

Finextra
MEDIUMVulnerabilityNEW

Nigerian national given 8-year sentence for tax business hacks

A Nigerian national who worked with a group to hack tax prep businesses and conduct millions of dollars in fraud using customer data was sentenced this week.

The Record