CVE-2026-18668: Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway

Q: Which deployments are identified as affected?

IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 are identified as affected. The description also identifies IBM Sterling B2B Integrator Standard Edition, but does not provide specific affected versions for that product.

Q: Does exploitation require authentication or user interaction?

No. The provided vector indicates that exploitation is network-accessible, requires low attack complexity, and requires neither privileges nor user interaction.

Q: What impact is indicated if the issue is exploited?

The vulnerability is described as enabling protocol downgrade attacks caused by a security misconfiguration. The supplied vector indicates low confidentiality and integrity impact, with no availability impact.

Published Oct 26, 2026

Updated

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration.

Other sources

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration.

— MITRE

Affected Software

1 affected component

IBM Sterling File Gateway<=6.2.1.0 - 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.1.3Patch IT49752
Upgrade
Upgrade IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.2.2Patch IT49752

Event History

Oct 26, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:04 PM

Data Sourced

via MITRE·06:04 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7294084

Frequently Asked Questions

Which deployments are identified as affected?

IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 are identified as affected. The description also identifies IBM Sterling B2B Integrator Standard Edition, but does not provide specific affected versions for that product.

Does exploitation require authentication or user interaction?

No. The provided vector indicates that exploitation is network-accessible, requires low attack complexity, and requires neither privileges nor user interaction.

What impact is indicated if the issue is exploited?

The vulnerability is described as enabling protocol downgrade attacks caused by a security misconfiguration. The supplied vector indicates low confidentiality and integrity impact, with no availability impact.

CVE-2026-18668: Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which deployments are identified as affected?

Does exploitation require authentication or user interaction?

What impact is indicated if the issue is exploited?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are identified as affected?

Does exploitation require authentication or user interaction?

What impact is indicated if the issue is exploited?