EUVD-2026-30508
GHSA-x5cx-4h7g-fcf9
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionNVD
Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.
AnalysisAI
Command injection in Delphix Continuous Data database connectors allows authenticated attackers with low-privilege network access to execute arbitrary operating system commands on staging or target hosts. The vulnerability affects multiple database connector types (IBM DB2, MongoDB, PostgreSQL, MySQL, Oracle EBS, SAP HANA, CockroachDB, Couchbase, Cassandra, YugabyteDB) due to improper input validation (CWE-78). …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: (1) Identify all Delphix Continuous Data instances and their connected database systems; (2) Review and restrict network access to Delphix staging/target hosts to trusted administrative IP ranges only; (3) Disable or isolate database connectors for non-critical systems if possible. Within 7 days: (1) Implement enhanced authentication controls-enforce MFA or IP whitelisting for all Delphix low-privilege accounts; (2) Enable detailed command and network logging on all connected database hosts; (3) Contact Perforce for patch timeline and interim advisory details. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today