Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-14992

IBM DataPower Gateway Out-of-bounds Write

Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM DataPower Gateway 10.6CD

  • 10.6.1 to ≤ 10.6.6affected

IBM DataPower Gateway 10.6.0

  • 10.6.0.0 to ≤ 10.6.0.10affected

IBM DataPower Gateway 11.0.0

  • 11.0.0.0 to ≤ 11.0.0.2affected

IBM DataPower Gateway 10.5.0

  • 10.5.0.0 to ≤ 10.5.0.22affected

References