CVE-2026-7253

Description

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks [GHSA-rr7j-v2q5-chgv] [CVE-2026-7253]. IBM Sterling File Gateway is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation below.

PUBLISHED Reserved 2026-04-27 | Published 2026-06-22 | Updated 2026-06-23 | Assigner ibm

Problem types

CWE-918 Server-Side request forgery (SSRF)

Product status

References

www.ibm.com/support/pages/node/7276994

cve.org (CVE-2026-7253)

nvd.nist.gov (CVE-2026-7253)

Download JSON