This vulnerability (CVE-2026-7769) affects specific versions of IBM Sterling B2B Integrator and IBM Sterling File Gateway. It is an SQL injection issue (CWE-89) that permits a remote attacker with low privileges to execute crafted SQL commands against the backend database. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, and high impact on confidentiality and integrity but no impact on availability. No known exploits in the wild or vendor patch information are currently available.

An attacker exploiting this SQL injection vulnerability could gain unauthorized access to sensitive data in the backend database, modify or delete data, potentially compromising the confidentiality and integrity of the system. Availability is not impacted according to the CVSS vector. The vulnerability requires the attacker to have some privileges on the system but no user interaction is needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected systems and monitor for suspicious database activity. Avoid exposing the vulnerable services to untrusted networks. Follow vendor advisories for updates on patches or mitigations.