VulnSocial

CVE-2026-8654Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-15: 3Technical Details · 2026-05-15: 305-15
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Israel@f1tym1
    Disclosure

    CVE-2026-8654 | Delphix Continuous Data IBM Db2 Connector os command injection (EUVD-2026-30508) https://ift.tt/OMzi8Iy A vulnerability identified as critical has been detected in Delphix Continuous Data IBM Db2 Connector, MangoDB Connector, PostgreSQL Connector, MySQL Connect…

    Post summary

    The text announces a critical OS command injection vulnerability (CVE‑2026‑8654) affecting various Delphix Connectors, but does not provide evidence of active exploitation, PoC, or a patch.

    0100055
    974 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8654 Arbitrary Command Execution in Delphix Continuous Data Connectors ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8654 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post announces CVE-2026-8654, a vulnerability allowing arbitrary command execution in Delphix Continuous Data Connectors, but provides no proof-of-concept, exploit code, or patch information.

    0000049
    4.0K followersView on X
  • Israel@f1tym1
    Disclosure

    CVE-2026-8654 | Delphix Continuous Data IBM Db2 Connector os command injection https://ift.tt/OMzi8Iy A vulnerability identified as critical has been detected in Delphix Continuous Data IBM Db2 Connector, MangoDB Connector, PostgreSQL Connector, MySQL Connector, Oracle EBS Con…

    Post summary

    An OS command injection vulnerability (CVE-2026-8654) has been identified as critical across multiple Delphix connectors, but the post offers no PoC, exploit code, or patch details.

    0000096
    974 followersView on X

Explore more

Back to dashboard