Vulnerability Intelligence Report
SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
CVE-2026-7769
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Injection
No Active Exploit Signals
CVSS Base Score
8.1
HIGH
Exploitability:2.9
Impact Score:5.2
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-89 ↗CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| IBM | Sterling B2B Integrator | 6.2.0.0 <= 6.2.0.5_2 (affected), 6.2.1.0 <= 6.2.1.1_2 (affected), 6.2.2.0 <= 6.2.2.0_1 (affected) |
| IBM | Sterling File Gateway | 6.2.0.0 <= 6.2.0.5_2 (affected), 6.2.1.0 <= 6.2.1.1_2 (affected), 6.2.2.0 <= 6.2.2.0_1 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Vulnerability Class
Injection
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | IBM Corporation · Vendor · USA |
| Reserved | 2026-05-04T13:28:13 |
| Published | 2026-07-28T17:58:46 |
| Last Updated | 2026-07-29T03:56:08 |
Community Chatter & Buzz