Live › vulnerability › CVE-2026-105453
Go to dashboardIBM Sterling Connect Direct for Unix versions 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 mishandle privileges. A local attacker with a foothold on the host can escalate to higher privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running IBM Sterling Connect Direct for Unix in the affected 6.3.0.x and 6.4.0.x ranges on a Unix host. Anyone on a patched release or without this product can skip it. Exposure depends on who holds local accounts on the host, which the sources do not describe.
No product ranges from the sources yet.
6.3.0.7 and 6.4.0.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
This page as .md · .json · in your agent: get_signal("CVE-2026-105453")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.