CVE-2026-3158 is an information disclosure vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway. Sensitive information is included in source code comments of a dashboard component across multiple 6.2.x versions. The vulnerability allows an attacker with network access and low privileges to read sensitive data embedded in the source code comments. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) reflects that the attack requires low complexity, privileges, and no user interaction, impacting confidentiality only. No patch or vendor advisory is provided in the input data, and no exploits are known in the wild.

The vulnerability leads to partial confidentiality loss by exposing sensitive information through source code comments. It does not affect integrity or availability. An attacker with network access and low privileges could leverage this to gain insight into sensitive data that may aid further attacks or reconnaissance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to affected components and review source code comments for sensitive information. Monitor IBM's security advisories for updates regarding patches or official mitigations.