CVE-2026-3157 is an information disclosure vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway. Sensitive information is included in source code comments of a mailbox component across multiple versions (6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1). This inclusion could allow an attacker with network access and low privileges to gain limited sensitive information, but does not impact integrity or availability. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and limited confidentiality impact.

The vulnerability allows disclosure of sensitive information embedded in source code comments, which may aid attackers in reconnaissance or further attacks. The impact is limited to confidentiality with no direct integrity or availability effects. The CVSS score of 4.3 reflects a moderate risk level due to the nature of the information disclosed and the required access level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, review and remove sensitive information from source code comments in affected components. Limit access to the affected systems to trusted users to reduce exposure risk.