Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-75878

IBM Sterling File Gateway is Vulnerable to Authentication Bypass

Description

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Sterling File Gateway

  • 6.2.0.0 to ≤ 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1affected

References