7.8Hoch
CVE-2026-93888IBM Sterling Connect:Direct for Unix Buffer Overflow
Beschreibung
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
Schwachstellentyp (CWE):
CWE-121
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| ibm | sterling connect direct | 6.4.0.0 | |
| IBM | Sterling Connect Direct for Unix | 6.4.0.0 – ≤ 6.4.0.6, 6.3.0.0 – ≤ 6.3.0.7 |
Referenzen und Patches
- https://www.ibm.com/support/pages/node/7292127 vendor-advisorypatch