一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月19日

CVE-2026-80441 [CRITICAL] – IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL inj

未分类
📑 文章目录

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting in compromise of the confidentiality, integrity, and availability of the affected system.