PatchTheCVEsterling file gateway vulnerabilities and fixes
Recent CVEs affecting sterling file gateway, with upgrade or downgrade steps. 9 tracked.
Also searched as: sterlingfilegateway.
sterling file gateway has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-07-30. Highest priority: CVE-2026-7769 (score 39/100).
- CVE-2025-36298 MEDIUM 5.4 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, a
- CVE-2025-36431 MEDIUM 5.4 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1
- CVE-2026-3482 MEDIUM 5.3 UPGRADE UPGRADE IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_
- CVE-2026-7775 MEDIUM 5.5 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1
- CVE-2026-7362 MEDIUM 4.3 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gat
- CVE-2026-7769 HIGH 8.1 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_
- CVE-2026-1918 MEDIUM 4.9 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_
- CVE-2026-3157 MEDIUM 4.3 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_
- CVE-2026-3158 MEDIUM 4.3 UPGRADE UPGRADE IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_
FAQ
How do I fix sterling file gateway vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sterling file gateway being exploited right now?
None of the tracked sterling file gateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sterling file gateway CVE should I patch first?
CVE-2026-7769 currently ranks highest (39/100): IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_.