CVE-2026-18668 · Vendor
NO FIX YET
IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 contain a security misconfiguration. A remote attacker can perform protocol downgrade attacks against the file transfer service.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running IBM Sterling File Gateway in the affected version ranges are exposed to protocol downgrade attacks via a misconfiguration. The sources do not name the specific setting or the required network position. Teams on other versions or without this product can skip it.
Not affected if other-versions
Who cares file-transfer, ibm-sterling, self-hosted
No fix yet, per the sources.
IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.