CVE-2026-1918: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file
Vulnerability summary
CVE-2026-1918 is a medium (CVSS 4.9) vulnerability in ibm sterling_b2b_integrator. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.8% of scored vulnerabilities.
Timeline
- 28-07-2026PublishedVulnerability first disclosed.
- 29-07-2026Last modifiedVulnerability information updated.
Description
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 stores potentially sensitive information in log files that could be read by a privileged user.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
Increase +0.11 pp
From 0.29% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm2 products
- sterling_b2b_integrator≥ 6.2.0.0, ≤ 6.2.0.5_2 | ≥ 6.2.1.0, ≤ 6.2.1.1_2 | ≥ 6.2.2.0, ≤ 6.2.2.0_1
- sterling_file_gateway≥ 6.2.0.0, ≤ 6.2.0.5_2 | ≥ 6.2.1.0, ≤ 6.2.1.1_2 | ≥ 6.2.2.0, ≤ 6.2.2.0_1
1 vendor · 2 products