This vulnerability (CVE-2026-19273) affects IBM Sterling B2B Integrator and IBM Sterling File Gateway Standard Edition in specified versions. It is classified as CWE-287 (Improper Authentication), meaning that the authentication mechanisms do not properly verify user credentials or permissions, allowing a remote attacker with valid authentication to bypass security restrictions. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, privileges required at the level of an authenticated user, no user interaction, and impacts confidentiality and integrity with no impact on availability.

An attacker who is already authenticated can bypass security restrictions, potentially leading to unauthorized access to sensitive information or unauthorized actions within the affected IBM products. The impact affects confidentiality and integrity but does not affect availability. There are no known exploits in the wild at this time.

No specific patch or fix links are provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, organizations should review and tighten authentication and access controls where possible to limit the risk.