CVE-2026-8654

8.7HIGH

Key Information:

Vendor

Delphix Continuous Data

Status
IBM Db2 Connector
Mangodb Connector
Postgresql Connector
Mysql Connector
Vendor
CVE Published:
15 May 2026

What is CVE-2026-8654?

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

Affected Version(s)

Cassandra Connector 0 < 2025.1.0

CockroachDB Connector 0 < 2025.2.0

Couchbase Connector 0 < 1.3.2

References

https://portal.perforce.com/s/cve/a91Qi000002z78HIAQ/auth...
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.