CVE-2026-81209 · Vendor
NO FIX YET
IBM Sterling B2B Integrator and Sterling File Gateway write sensitive credentials into their logs. A remote attacker with a valid account can read those credentials and obtain sensitive information.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running IBM Sterling B2B Integrator or Sterling File Gateway Standard Edition in the listed version ranges. The flaw needs a remote account with some access before the attacker can read the logged credentials. The sources do not say what default configuration or logging setting turns the leak on, so unknown.
Not affected if no-authenticated-access-to-untrusted-users
Who cares b2b-integrator, file-gateway, ibm-sterling
unknown if the sources do not name a check.No fix yet, per the sources.
IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.