← CVE Intelligence

CVE-2026-8654

Delphix Continuous data / IBM Db2 Connector PUBLISHED

Description (CNA)

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

Affected (CNA)

Vendor / product	Versions
Delphix Continuous data / IBM Db2 Connector	affected 0 before 2025.2
Delphix Continuous data / MangoDB Connector	affected 0 before 2025.2.1
Delphix Continuous data / PostgreSQL Connector	affected 0 before 2025.1.0
Delphix Continuous data / MySQL Connector	affected 0 before 2025.1.0
Delphix Continuous data / Oracle EBS Connector	affected 0 before 2025.2.0
Delphix Continuous data / SAP HANA Connector	affected 0 before 2026.2.0
Delphix Continuous data / CockroachDB Connector	affected 0 before 2025.2.0
Delphix Continuous data / Couchbase Connector	affected 0 before 1.3.2
Delphix Continuous data / Cassandra Connector	affected 0 before 2025.1.0
Delphix Continuous data / YugabyteDB Connector	affected 0 before 2025.1.1
Delphix Continuous data / MSSQL on Linux Connector	affected 0 before 2025.1.0
Delphix Continuous data / Oracle Backup Ingestion Connector	affected 0 before 4.2.1

CWE

CWE-78

References

https://portal.perforce.com/s/cve/a91Qi000002z78HIAQ/authenticated-os-command-injection-in-delphix-continuous-data-connectors

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.