Threat Investigation
Request a demo

CVE-2026-8654

High

Description

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

SeverityHigh
CVSS8.7
Exploit probability14. percentile0.2%
ProductIBM Db2 Connector
PublishedMay 15, 2026
First seenMay 15, 2026
Weakness typeCWE-78OS command injection

How to fix

Update
  • Delphix Continuous data IBM Db2 Connector2025.2 or later
  • Delphix Continuous data MangoDB Connector2025.2.1 or later
  • Delphix Continuous data PostgreSQL Connector2025.1.0 or later
  • Delphix Continuous data MySQL Connector2025.1.0 or later
  • Delphix Continuous data Oracle EBS Connector2025.2.0 or later
  • Delphix Continuous data SAP HANA Connector2026.2.0 or later
  • Delphix Continuous data CockroachDB Connector2025.2.0 or later
  • Delphix Continuous data Couchbase Connector1.3.2 or later
  • Delphix Continuous data Cassandra Connector2025.1.0 or later
  • Delphix Continuous data YugabyteDB Connector2025.1.1 or later
  • Delphix Continuous data MSSQL on Linux Connector2025.1.0 or later
  • Delphix Continuous data Oracle Backup Ingestion Connector4.2.1 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
Delphix Continuous data IBM Db2 Connectorv < 2025.22025.2
Delphix Continuous data MangoDB Connectorv < 2025.2.12025.2.1
Delphix Continuous data PostgreSQL Connectorv < 2025.1.02025.1.0
Delphix Continuous data MySQL Connectorv < 2025.1.02025.1.0
Delphix Continuous data Oracle EBS Connectorv < 2025.2.02025.2.0
Delphix Continuous data SAP HANA Connectorv < 2026.2.02026.2.0
Delphix Continuous data CockroachDB Connectorv < 2025.2.02025.2.0
Delphix Continuous data Couchbase Connectorv < 1.3.21.3.2
Delphix Continuous data Cassandra Connectorv < 2025.1.02025.1.0
Delphix Continuous data YugabyteDB Connectorv < 2025.1.12025.1.1
Delphix Continuous data MSSQL on Linux Connectorv < 2025.1.02025.1.0
Delphix Continuous data Oracle Backup Ingestion Connectorv < 4.2.14.2.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.