CVE-2026-7769High· 8.1▾ TwilightIBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerab…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
sterling_b2b_integrator >= 6.2.0.0 <= 6.2.0.5_2sterling_b2b_integrator >= 6.2.1.0 <= 6.2.1.1_2sterling_b2b_integrator >= 6.2.2.0 <= 6.2.2.0_1sterling_file_gateway >= 6.2.0.0 <= 6.2.0.5_2sterling_file_gateway >= 6.2.1.0 <= 6.2.1.1_2sterling_file_gateway >= 6.2.2.0 <= 6.2.2.0_1ProductVersionAPARRemediation & FixIBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT48302 Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT48302 Apply B2Bi 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1 IT48302 Apply B2Bi 6.2.2.1
The IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes .
The container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-19273Medium· 5.4IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated…
CVE-2026-19319Medium· 5.3IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx
CVE-2026-16725Medium· 6.5IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith
CVE-2026-17493High· 7.5IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.
CVE-2026-82418Critical· 9.8IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL
CVE-2026-108588Medium· 5.4Multiple vulnerabilities that affects IBM Db2 Genius Hub