Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-14992 EUVD-2026-94987GHSA-3m79-9w2v-h4h8

IBM DataPower Gateway Out-of-bounds Write

Published Oct 8, 2026 · Updated Oct 9, 2026 · Assigned by ibm

Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.

Affected products

VendorProductAffectedFixed
IBM DataPower Gateway 10.6CD 10.6.1 – ≤ 10.6.6 —
IBM DataPower Gateway 10.6.0 10.6.0.0 – ≤ 10.6.0.10 —
IBM DataPower Gateway 11.0.0 11.0.0.0 – ≤ 11.0.0.2 —
IBM DataPower Gateway 10.5.0 10.5.0.0 – ≤ 10.5.0.22 —

Advisories 2

References