# CVE-2026-81209: IBM Sterling B2B Integrator and File Gateway sensitive information in logs

Source: https://junglewise.ai/threats/cve-2026-81209-ibm-sterling-b2b-integrator-6-2-1-0-through-6-2-1-2-1-6-2-2-0-6-2  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-08. Updated: 2026-11-08  
License: CC BY 4.0 with a link back

CVE-2026-81209 · Severity: medium · CVSS 4.9 · Published 2026-11-08

IBM Sterling B2B Integrator and File Gateway are middleware products used to manage and transfer files between business partners. A vulnerability allows authenticated attackers to read sensitive credentials that have been improperly logged to files, potentially exposing authentication secrets. An attacker with valid credentials could access these log files and obtain additional credentials for lateral movement or further system compromise.

Technologies: [IBM Sterling File Gateway](https://junglewise.ai/threats/technologies/sterling-file-gateway), [IBM Sterling B2b Integrator](https://junglewise.ai/threats/technologies/sterling-b2b-integrator). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2026-81209 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-81209 being exploited in the wild.

**How severe is CVE-2026-81209?** Medium severity, with a CVSS score of 4.9, published 8 November 2026.

**Which products and versions are affected?** IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 through 6.2.2.1_1; IBM Sterling B2b Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 through 6.2.2.1_1.

**Is there a fix for CVE-2026-81209?** Yes: fixed in IBM Sterling B2B Integrator 6.2.1.3, 6.2.2.2; IBM Sterling File Gateway 6.2.1.3, 6.2.2.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-81209 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-81209?** Check whether you run IBM Sterling File Gateway or IBM Sterling B2b Integrator at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in IBM Sterling B2B Integrator 6.2.1.3, 6.2.2.2; IBM Sterling File Gateway 6.2.1.3, 6.2.2.2

## Technical details

The vulnerability is improper logging of sensitive credentials (CWE-532) in IBM Sterling B2B Integrator and File Gateway versions 6.2.1.0–6.2.1.2_1 and 6.2.2.0–6.2.2.1_1. A remote authenticated attacker with high privilege (PR:H) can read log files containing unmasked credentials via the network, gaining high confidentiality impact. Fixes are available in versions 6.2.1.3 and 6.2.2.2.

## Affected products

- IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 through 6.2.2.1_1
- IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 through 6.2.2.1_1

## Timeline

- 2026-10-21: disclosed

## References

- [https://www.ibm.com/support/pages/node/7293291](https://www.ibm.com/support/pages/node/7293291)

## Related threats

- [IBM Sterling B2B Integrator and File Gateway improper authorization](https://junglewise.ai/threats/cve-2026-19307-ibm-sterling-b2b-integrator-6-2-1-0-through-6-2-1-2-1-and-6-2-2-0)
- [IBM Sterling File Gateway protocol downgrade via security misconfiguration](https://junglewise.ai/threats/cve-2026-18668-ibm-sterling-file-gateway-6-2-1-0-through-6-2-1-2-1-and-6-2-2-0-6)
- [IBM Sterling B2B Integrator sensitive information disclosure in logs](https://junglewise.ai/threats/cve-2026-12737-ibm-sterling-b2b-integrator-6-2-2-0-through-6-2-2-1-1-and-ibm)
- [IBM Sterling File Gateway authentication bypass via unvalidated SSO header](https://junglewise.ai/threats/cve-2026-75878-ibm-sterling-file-gateway-could-allow-a-remote-attacker-to-bypass)
- [IBM Sterling File Gateway improper access control](https://junglewise.ai/threats/cve-2026-19290-ibm-sterling-file-gateway-improper-access-control)