CVE-2026-75792

MediumCVSS 4.3

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

21th percentile - higher than 21% of all known CVEs

Summary

IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass.

Risk Assessment

An attacker could gain unauthorized access to sensitive administrative interface components, potentially leading to privilege escalation or exposure of configuration details.

Recommendation

Upgrade to a patched version and enforce server-side authorization controls.

Other vulnerabilities in IBM Sterling Secure Proxy

CVE-2026-78415Medium
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.

Original NVD description (English source)

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS