PT-2026-41270 · Delphix Continuous Data · Cassandra Connector+11

Published 2026-05-15 · Updated 2026-05-15 · CVE-2026-8654

Mitre

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-8654

Affected Products

Cassandra Connector

Cockroachdb Connector

Couchbase Connector

Ibm Db2 Connect

Mssql On Linux Connector

Mangodb Connector

Mysql Connectors

Oracle Backup Ingestion Connector

Oracle Ebs Connector

Postgresql Connector

Sap Hana Connector

Yugabytedb Connector

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-8654 · Security Note
• https://portal.perforce.com/s/cve/a91Qi000002z78HIAQ/authenticated-os-command-injection-in-delphix-continuous-data-connectors · Vendor Advisory