中文

// CVE · PUBLISHED 2026-10-08

CVE-2026-14269

IBM / DataPower Gateway 10.6CD · IBM / DataPower Gateway 10.6.0 · IBM / DataPower Gateway 11.0.0 · +1

9.8 · CVSS 3.1Critical

Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary code on the system.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.