High severityNVD Advisory· Published May 15, 2026· Updated May 15, 2026

CVE-2026-8654

Description

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.

Affected products

Delphix/Continuous Datallm-create

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

portal.perforce.com/s/cve/a91Qi000002z78HIAQ/authenticated-os-command-injection-in-delphix-continuous-data-connectorsnvd

News mentions

How AI Hallucinations Are Creating Real Security Risks
The Hacker News · May 14, 2026
New Venom Stealer MaaS Platform Automates Continuous Data Theft
Infosecurity Magazine · Apr 1, 2026

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000