CVE-2026-19307: Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

Q: What level of access does an attacker need?

An attacker must be authenticated and able to reach the affected product remotely. No user interaction is required, and the issue can expose pages the authenticated user is not authorized to access.

Q: Which deployments are in scope?

Affected versions are IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, and 6.2.2.0 through 6.2.2.1_1. The advisory specifically identifies Standard Edition for Sterling File Gateway and also states that Sterling B2B Integrator Standard Edition is affected.

Q: What is the expected impact if exploited?

The stated impact is unauthorized access to pages. The supplied severity vector indicates low confidentiality impact and no stated integrity or availability impact.

Published Oct 20, 2026

Updated

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization.

Other sources

IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization.

— IBM

Affected Software

2 affected components

IBM Sterling B2B Integrator<=6.2.1.0 - 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1

IBM Sterling File Gateway<=6.2.1.0 - 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Sterling B2B Integrator to a version that resolves this vulnerability.
Fixed in 6.2.1.3Patch IT49729
Upgrade
Upgrade IBM Sterling B2B Integrator to a version that resolves this vulnerability.
Fixed in 6.2.2.2Patch IT49729
Upgrade
Upgrade IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.1.3Patch IT49729
Upgrade
Upgrade IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.2.2Patch IT49729

Event History

Oct 20, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:28 PM

Data Sourced

via MITRE·06:28 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7293157

Frequently Asked Questions

What level of access does an attacker need?

An attacker must be authenticated and able to reach the affected product remotely. No user interaction is required, and the issue can expose pages the authenticated user is not authorized to access.

Which deployments are in scope?

Affected versions are IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, and 6.2.2.0 through 6.2.2.1_1. The advisory specifically identifies Standard Edition for Sterling File Gateway and also states that Sterling B2B Integrator Standard Edition is affected.

What is the expected impact if exploited?

The stated impact is unauthorized access to pages. The supplied severity vector indicates low confidentiality impact and no stated integrity or availability impact.

CVE-2026-19307: Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What level of access does an attacker need?

Which deployments are in scope?

What is the expected impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

Which deployments are in scope?

What is the expected impact if exploited?