CVE-2026-7775 is a stored cross-site scripting vulnerability (CWE-79) affecting IBM Sterling B2B Integrator and IBM Sterling File Gateway in specified 6.2.x versions. It allows a privileged user to embed arbitrary JavaScript code in the web UI, which can alter intended functionality and potentially disclose credentials during a trusted session. The vulnerability requires high privileges and does not require user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and impacts confidentiality and integrity with no availability impact. No vendor advisory or patch is currently available.

The vulnerability enables a privileged user to inject malicious JavaScript into the web interface, which can lead to unauthorized disclosure of credentials within an active trusted session. This compromises confidentiality and integrity of the affected system's web interface. There is no indication of availability impact or known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict privileged user access to trusted personnel only and monitor for suspicious activity related to web UI modifications. Avoid exposing the web interface to untrusted networks.