UI Spoofing and Phishing Vulnerabilities in IBM Sterling Secure Proxy
CVE-2026-78415

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Sterling Secure Proxy
Vendor
CVE Published:
14 September 2026

What is CVE-2026-78415?

A vulnerability in IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 enables remote authenticated attackers to execute UI spoofing and phishing attacks. This occurs due to improper handling of user-provided HTML markup, which could potentially mislead users into providing sensitive information. This highlights the critical need for organizations using these versions to implement timely patches and strengthen their defenses against such exploits.

Affected Version(s)

Sterling Secure Proxy 6.2.0.0 <= 6.2.1.2

References

https://www.ibm.com/support/pages/node/7287369
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.