Live › vulnerability › CVE-2026-93888
Go to dashboardThe apnotify utility in IBM Sterling Connect Direct for Unix versions 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 does not validate user input properly. A local or remote party able to supply input to it can inject code that the utility runs.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running IBM Sterling Connect Direct for Unix in the affected 6.3 or 6.4 release ranges are exposed. The sources do not say which deployment settings or input paths are needed to reach the flaw, so the exact exposure is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
This page as .md · .json · in your agent: get_signal("CVE-2026-93888")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.