CVE-2026-7769 is a SQL injection vulnerability (CWE-89) affecting IBM Sterling B2B Integrator and IBM Sterling File Gateway in specified 6.2.x versions. The vulnerability permits a remote attacker with low privileges to inject malicious SQL statements, which could compromise the confidentiality and integrity of the backend database by allowing unauthorized data access and modification. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality and integrity with network attack vector and no user interaction required. No vendor advisory or patch information is currently available, and the vulnerability is not known to be exploited in the wild.

Successful exploitation could allow an attacker to view, add, modify, or delete information in the backend database of affected IBM Sterling products. This compromises data confidentiality and integrity but does not affect availability. The attack requires network access and low privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected systems and monitor for suspicious activity related to SQL injection attempts. Avoid exposing vulnerable interfaces to untrusted networks.