CVE-2026-78415

Received Received - Intake

IBM Sterling Secure Proxy UI Spoofing Vulnerability

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-78415

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	sterling_secure_proxy	From 6.2.0.0 (inc) to 6.2.1.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 has a flaw where a remote authenticated attacker can inject malicious HTML markup. This allows them to create fake user interfaces or phishing pages that appear legitimate to users.

Impact Analysis

An attacker could trick users into entering sensitive information like credentials or personal data by presenting a spoofed interface. This could lead to unauthorized access, data theft, or further compromise of systems.

Compliance Impact

This vulnerability could lead to unauthorized data access or disclosure, violating GDPR's data protection principles or HIPAA's security requirements. Organizations may face compliance violations, fines, or reputational damage if exploited.

Mitigation Strategies

Apply the latest IBM Sterling Secure Proxy update to version 6.2.1.2 or later to address the UI spoofing issue.

Hi! I’m here to help you understand CVE-2026-78415. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70