CVE-2026-78415

MediumCVSS 5.4

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.

Risk Assessment

An attacker may impersonate trusted UI elements, potentially leading to credential theft or other sensitive information disclosure.

Recommendation

Apply patches from IBM and consider restricting user input of HTML.

Other vulnerabilities in IBM Sterling Secure Proxy

CVE-2026-75792Medium
IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass.

Original NVD description (English source)

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS