CVE-2026-93888: CWE-121 Stack-based Buffer Overflow in IBM Sterling Connect Direct for Unix

CVE-2026-93888 is a stack-based buffer overflow vulnerability (CWE-121) in the apnotify utility of IBM Sterling Connect Direct for Unix. The flaw arises from insufficient validation of user input, allowing potential code injection. Affected versions include 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. The attack vector requires local access with low privileges and no user interaction is needed.

Successful exploitation could allow an attacker with local low-privilege access to execute arbitrary code, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability affects critical security properties and could result in significant operational impact.

No vendor advisory or patch information is provided in the input data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the apnotify utility.