VDB

CVE-2026-1264

CVE-2026-1264 PUBLISHED CVSS 7.1 HIGH

Reported by ibm · Published March 17, 2026

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.

Risk Scores

CVSS 3.1
7.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Affected Products

VendorProductVersions
IBMSterling B2B Integrator6.1.0.0, 6.2.0.0, 6.2.1.0
IBMSterling B2B Integrator6.1.0.0, 6.2.0.0, 6.2.1.0

Timeline

  • Jun 28, 2021 PoC Published
  • Mar 17, 2026 CVE Published
  • Mar 18, 2026 EPSS Score
  • Mar 19, 2026 EPSS Score
  • Mar 20, 2026 EPSS Score
  • Mar 20, 2026 PoC Published
  • Mar 22, 2026 EPSS Score
  • Mar 23, 2026 EPSS Score
  • Mar 24, 2026 EPSS Score
  • Mar 25, 2026 EPSS Score
  • Mar 26, 2026 Coalition ESS Score
  • May 18, 2026 EPSS Score

References

  • vendor-advisorypatch
Open in Interactive Console →
$ Console Community · 50/day Open console ›