CVE-2026-105453

HighCVSS 8.4

Published: 20/10/2026(UTC)Updated: 21/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

Risk Assessment

A local attacker could gain elevated privileges and take control of the file transfer system.

Recommendation

Update IBM Sterling Connect Direct for Unix to a patched version and review privilege configuration.

Other vulnerabilities in IBM Sterling Connect Direct for Unix

CVE-2026-93888High
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

Original NVD description (English source)

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS