Skip to content
OpenAdvisories
High · 8.7 CVE-2026-8654 EUVD-2026-30508GHSA-x5cx-4h7g-fcf9

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands…

Published May 15, 2026 · Updated May 15, 2026 · Assigned by Perforce

Vendor: Delphix Continuous data Product: Cassandra Connector Product: CockroachDB Connector Product: Couchbase Connector Product: IBM Db2 Connector Product: MangoDB Connector Product: MSSQL on Linux Connector Product: MySQL Connector Product: Oracle Backup Ingestion Connector Product: Oracle EBS Connector Product: PostgreSQL Connector Product: SAP HANA Connector Product: YugabyteDB Connector Platform: Linux

Description

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

Affected products

VendorProductAffectedFixed
Delphix Continuous data IBM Db2 Connector < 2025.2 2025.2
Delphix Continuous data MangoDB Connector < 2025.2.1 2025.2.1
Delphix Continuous data PostgreSQL Connector < 2025.1.0 2025.1.0
Delphix Continuous data MySQL Connector < 2025.1.0 2025.1.0
Delphix Continuous data Oracle EBS Connector < 2025.2.0 2025.2.0
Delphix Continuous data SAP HANA Connector < 2026.2.0 2026.2.0
Delphix Continuous data CockroachDB Connector < 2025.2.0 2025.2.0
Delphix Continuous data Couchbase Connector < 1.3.2 1.3.2
Delphix Continuous data Cassandra Connector < 2025.1.0 2025.1.0
Delphix Continuous data YugabyteDB Connector < 2025.1.1 2025.1.1
Delphix Continuous data MSSQL on Linux Connector < 2025.1.0 2025.1.0
Delphix Continuous data Oracle Backup Ingestion Connector < 4.2.1 4.2.1

References