CVE-2026-75792

Received Received - Intake

IBM Sterling Secure Proxy Client-Side Authorization Bypass

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-75792

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	sterling_secure_proxy	From 6.2.0.0 (inc) to 6.2.1.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 has a client-side authorization bypass vulnerability. This allows a remote authenticated attacker to view administrative user interface components that they should not have access to.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive administrative functions or data, potentially leading to further compromise of the system or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Update IBM Sterling Secure Proxy to a version beyond 6.2.1.2 to address the client-side authorization bypass issue. Ensure administrative user interface components are not accessible to unauthorized users.

Hi! I’m here to help you understand CVE-2026-75792. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70