CVE-2026-3158: sterling file — Fix

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information being included in the source code comments of a dashboard component.

Is your site exposed to CVE-2026-3158?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

Weakness Type (CWE)

CWE-615 CWE-615

Affected Products

Vendor	Product	Versions
ibm	sterling_b2b_integrator	6.2.0.0 — 6.2.0.5_2
ibm	sterling_b2b_integrator	6.2.1.0 — 6.2.1.1_2
ibm	sterling_b2b_integrator	6.2.2.0 — 6.2.2.0_1
ibm	sterling_file_gateway	6.2.0.0 — 6.2.0.5_2
ibm	sterling_file_gateway	6.2.1.0 — 6.2.1.1_2
ibm	sterling_file_gateway	6.2.2.0 — 6.2.2.0_1

References

Advisories & Patches

https://www.ibm.com/support/pages/node/7280661

Frequently Asked Questions

What is CVE-2026-3158? +

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information being included in the source code comments of a dashboard component. It has a CVSS v3.1 base score of 4.3 (MEDIUM).

How severe is CVE-2026-3158? +

CVE-2026-3158 has a CVSS v3.1 score of 4.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance. The EPSS score is 0.0018, placing it in the 0th percentile for exploitation probability.

What products are affected by CVE-2026-3158? +

CVE-2026-3158 affects products from ibm, specifically: sterling_b2b_integrator, sterling_file_gateway. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2026-3158? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-52298 7.5

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view …

CVE-2026-3157 4.3

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 …

CVE-2024-23621 10.0

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability …

CVE-2024-23622 10.0

A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this …

CVE-2023-47143 10.0

IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of …

CVE-2024-56346 10.0

IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to …

CVE-2026-3158