CVE-2026-93888

HighCVSS 7.8

Published: 20/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

Risk Assessment

An attacker could exploit the apnotify utility to inject and execute code. This may lead to a compromise of the system.

Recommendation

Update IBM Sterling Connect Direct for Unix to the latest patched version. Restrict access to the apnotify utility.

Other vulnerabilities in IBM Sterling Connect Direct for Unix

CVE-2026-105453High
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

Original NVD description (English source)

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS