IBM Sterling Improper Access Control Vulnerability (CVE-2026-7362) and Patch Advisory

Vulnerability Overview Vulnerability Name: Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway CVE Number: CVE-2026-7362 Description: IBM Sterling File Gateway allows authenticated users to obtain sensitive information that is only available to privileged users. CWE Number: CWE-284: Improper Access Control CVSS Score: 4.3 CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Affected Products Affected Products: - IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0 – 6.2.1.1.2 - IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.2.0 – 6.2.2.0.1 Fix Information Fixed Versions: - IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.2, 6.2.2.1 - IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.2.0 – 6.2.2.0.1 APAR Number: IT49322 How to Obtain the Fix: - IBM Versions 6.2.1.2 and 6.2.2.1 are available via Fix Central. - Container versions 6.2.1.2 and 6.2.2.1 are available via the IBM Entitled Registry. Additional Information Initial Release Date: July 22, 2026 Last Modified Date: July 22, 2026 Document Number: 7280849 Operating Systems: Windows, Linux, AIX Disclaimer IBM provides the CVSS score “as is” without any express or implied warranties under the FIRST CVSS scoring system. Customers are responsible for evaluating the impact of the vulnerability on their environments. References Complete CVSS v3 Guide On-line Calculator v3 Related Resources IBM Secure Engineering Web Portal IBM Product Security Incident Response Blog Change History July 22, 2026: Initial Publication Notes The CVSS Environmental Metric is specific to the customer’s environment and will ultimately affect the overall CVSS Score. Customers can evaluate the impact of the vulnerability on their environment by accessing the links in the references section of this security bulletin.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Sterling Improper Access Control Vulnerability (CVE-2026-7362) and Patch Advisory