sterling_connect_direct_for_unix vulnerabilities
CVEs whose affected-version data names the sterling_connect_direct_for_unix package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-93888High· 7.8IBM Sterling Connect:Direct for Unix Buffer Overflow
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
▾ TwilightIBM · Sterling Connect Direct for UnixEPSS 0.21%via CVEORG
CVE-2026-105453High· 8.4IBM Sterling Connect:Direct for Unix Improper Privilege Management
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.
▾ TwilightIBM · Sterling Connect Direct for UnixEPSS 0.13%via CVEORG