CVE-2026-14992: ibm datapower_gateway

CVSS 9.8 (critical) · published 2026-10-08

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.

Affected products (NVD): ibm datapower_gateway

Fixed in (NVD): 10.5.0.23, 10.6.0.11, 11.0.0.3

Weakness: CWE-787

Source: NVD CVE-2026-14992

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.