CVE-2026-75878 is an improper authentication vulnerability (CWE-287) in IBM Sterling File Gateway version 6.2.0.0. The vulnerability arises because the product does not properly validate an SSO header, allowing a remote attacker to bypass authentication controls and gain a fully authenticated session. This can lead to unauthorized access to the system with high confidentiality and integrity impact, as indicated by the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

An attacker who successfully exploits this vulnerability can bypass authentication mechanisms and gain unauthorized access to the IBM Sterling File Gateway system with full authenticated session privileges. This compromises the confidentiality and integrity of the system and its data. There is no indication of availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a fix is available, restrict network access to the affected system and monitor for suspicious activity related to authentication bypass attempts.