CVE-2026-1918 is a vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway where sensitive information is inserted into log files. This occurs in versions 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1. The sensitive data stored in logs could be read by users with privileged access, potentially leading to confidentiality breaches. The vulnerability is classified under CWE-532 (Insertion of Sensitive Information into Log File). The CVSS v3.1 base score is 4.9, with vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact. No vendor advisory or patch information is currently available.

The vulnerability allows sensitive information to be stored in log files, which could be accessed by privileged users. This may lead to unauthorized disclosure of confidential data. The impact is limited to confidentiality and requires high privileges to exploit. There is no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to log files to only trusted privileged users and monitor access controls carefully. Avoid logging sensitive information where possible through configuration adjustments if supported.