CVE-2026-19290

HighCVSS 7.5

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 through 6.2.1.2, and 6.2.2.0 through 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.

Risk Assessment

A remote attacker could gain access to sensitive information, potentially leading to data leakage and confidentiality breaches. This poses a serious risk to the security of transferred files.

Recommendation

Update IBM Sterling File Gateway to the latest version or apply IBM patches. Review and tighten access controls on the system.

Other vulnerabilities in IBM Sterling File Gateway

CVE-2026-75878Critical
IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header.

Original NVD description (English source)

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.