CVE-2026-1918 describes a vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway where sensitive information is improperly stored in log files. This exposure could allow privileged users to read sensitive data from logs. The affected versions include 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1. The vulnerability is identified as CWE-532 (Insertion of Sensitive Information into Log File). The CVSS vector indicates network attack vector, low attack complexity, required high privileges, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

The vulnerability allows sensitive information to be stored in log files accessible to privileged users. This could lead to unauthorized disclosure of sensitive data if such privileged accounts are compromised or misused. There is no direct impact on system integrity or availability. The confidentiality impact is rated high, while integrity and availability impacts are none.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict access to log files to only trusted privileged users and monitor privileged account activities to reduce risk of sensitive information exposure.