Sterling Connect Direct for Unix vulnerabilities

3 known vulnerabilities in Sterling Connect Direct for Unix from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Sterling Connect Direct for Unix: Stack-based Buffer Overflow

  CVE-2026-93888Oct 20, 2026IBM

  IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.

• 8.4 High severity

  Sterling Connect Direct for Unix: Improper Privilege Management

  CVE-2026-105453Oct 20, 2026IBM

  IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

• 7.2 High severity

  Sterling Connect:Direct for Unix: Execution with Unnecessary Privileges

  CVE-2025-36137Oct 30, 2025IBM

  IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privilege