CVE-2026-93888

Awaiting Analysis Awaiting Analysis - Queue

Code Injection in IBM Sterling Connect Direct for Unix

Publication date: 2026-10-20

Last updated on: 2026-10-22

Assigner: IBM Corporation

Description

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-22

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-93888

EUVD

EUVD-2026-106857

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Sterling Connect Direct for Unix	6.4.0.0
IBM	Sterling Connect Direct for Unix	6.3.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

IBM Sterling Connect Direct for Unix versions 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 contain a vulnerability in the apnotify utility where insufficient validation of user input allows code injection.

Impact Analysis

An attacker could exploit this to execute arbitrary code on the affected system with the privileges of the user running the apnotify utility, potentially leading to unauthorized access or control of the system.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements such as GDPR or HIPAA if sensitive data is exposed or altered.

Mitigation Strategies

Apply the latest IBM Sterling Connect Direct for Unix patches or updates to address the code injection vulnerability in the apnotify utility. Disable or restrict access to the apnotify utility if not required. Monitor IBM's security advisories for further guidance.

Hi! I’m here to help you understand CVE-2026-93888. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...