Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-75878 EUVD-2026-83300GHSA-652p-cfff-8crm

IBM Sterling File Gateway is Vulnerable to Authentication Bypass

Published Sep 18, 2026 · Updated Sep 19, 2026 · Assigned by ibm

Vendor: IBM Product: Sterling File Gateway

Description

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header.

Affected products

VendorProductAffectedFixed
IBM Sterling File Gateway 6.2.0.0 – ≤ 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 —

References