CVE-2026-7253
published 2026-06-22CVE-2026-7253: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which…
PriorityP357high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.37%
31.1th percentile
IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | sterling_b2b_integrator | 6.2.1.0 – 6.2.1.1_2 | — |
| ibm | sterling_b2b_integrator | 6.2.2.0 – 6.2.2.0_1 | — |
| ibm | sterling_file_gateway | 6.2.1.0 – 6.2.1.1_2 | — |
| ibm | sterling_file_gateway | 6.2.2.0 – 6.2.2.0_1 | — |
| ibm | watson_speech_services_cartridge | — | — |
| ibm | watson_speech_services_cartridge | >= 4.0.0 < 5.3.1 | 5.3.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized requests
ghsa_unreviewed·2026-06-22·CVSS 5.3
CVE-2026-7253 [MEDIUM] CWE-918 IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized requests
IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks [GHSA-rr7j-v2q5-chgv] [CVE-2026-7253]. IBM Sterling File Gateway is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation below.
VulDB
IBM Watson Speech Services Cartridge up to 5.3.1 Watson Speech Service server-side request forgery
vuldb·2026-06-22·CVSS 5.3
CVE-2026-7253 [MEDIUM] IBM Watson Speech Services Cartridge up to 5.3.1 Watson Speech Service server-side request forgery
A vulnerability marked as critical has been reported in IBM Watson Speech Services Cartridge up to 5.3.1. The affected element is an unknown function of the component Watson Speech Service. The manipulation leads to server-side request forgery.
This vulnerability is traded as CVE-2026-7253. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-22
Published