{"affected":[{"product":"Guardium Key Lifecycle Manager","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"4.1"},{"status":"affected","version":"4.1.1"},{"status":"affected","version":"4.2"},{"status":"affected","version":"4.2.1"},{"status":"affected","version":"5.0"},{"status":"affected","version":"5.1"}]}],"cveId":"CVE-2026-78537","cwes":["CWE-327"],"description":"IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.8,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"}],"modifiedAt":1794163190259,"publishedAt":1794163190259,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7292031"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM encourages customers to update their systems promptly.\n\nPrincipal Product and Version(s)Remediation/FixesIBM Guardium Key Lifecycle Manager (GKLM) v4.1\n\n1. Download IBM Guardium Key Lifecycle Manager  https://www.ibm.com/docs/en/gklm/5.x?topic=software-download-instructions"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7292031"}],"revision":"0f183d9af64beea0ccd5bf4eff35fdb2e277ed10f6008c7a3e0d120804cffd50","sources":[{"modifiedAt":1794163190259,"name":"CNA: ibm","retrievedAt":1794164937333,"url":"https://www.cve.org/CVERecord?id=CVE-2026-78537"}],"ssvc":null,"status":"published","title":"IBM Guardium Key Lifecycle Manager is affected by a security vulnerability","updatedAt":1794164937333}