CVE-2026-18525: IBM Sterling Secure Proxy is vulnerable to multiple issues
Published Sep 28, 2026
·Updated
IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.
Other sources
IBM Sterling Secure Proxy could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port.
— IBM
Affected Software
1 affected component
IBM Secure Proxy<=6.1.0.0 - 6.2.1.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Sterling Secure Proxyto a version that resolves this vulnerability.Fixed in 6.1.0.5 - Upgrade
Upgrade
IBM Sterling Secure Proxyto a version that resolves this vulnerability.Fixed in 6.2.1.3
Event History
Sep 28, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Nov 8, 2026
CVE Published
via MITRE·05:56 PM
Data Sourced
via MITRE·05:56 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness