CVE-2026-75878

No fix known EPSS <1%CVSS 9.1

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header.

Published 2026-09-18 · CVE record · OSV

Products: ibm sterling_file_gateway