CVE-2026-93888High· 7.8▾ TwilightIBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
sterling_connect_direct_for_unix >= 6.4.0.0 <= 6.4.0.6sterling_connect_direct_for_unix >= 6.3.0.0 <= 6.3.0.7IBM strongly recommends addressing the vulnerability now by upgrading
ProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix021Apply 6.4.0.6.iFix022, included in 6.4.0.6.iFix025 available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix032Apply 6.3.0.7.iFix033, available on Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-76587High· 8.8IBM Planning Analytics Buffer Overflow
CVE-2026-105453High· 8.4IBM Sterling Connect:Direct for Unix Improper Privilege Management
CVE-2026-12665High· 8.1IBM MQ Buffer Overflow
CVE-2026-85457High· 8.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-96266High· 8.2IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing
CVE-2026-96264High· 8.2IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface