CVE-2026-105453
8.4HighPublished 20 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality, integrity
- Weakness
- CWE-269
Impact
A local attacker with a low-privileged account can gain elevated privileges on the host system. They require existing local shell or system access to exploit it.
Root cause
Improper privilege management allows local users to execute unauthorized actions with elevated permissions.
Affected systems
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Fix & remediation
Upgrade to IBM Sterling Connect Direct for Unix 6.3.0.8, 6.4.0.7, or later as specified in the IBM advisory. No workaround or interim mitigation is documented, so restrict local system access until patched.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.