CVE-2026-14888

Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-14888 ↗
• www.ibm.com/support/pages/node/7289775 ↗

Related CVEs

• CVE-2026-9209mJob / mJobTimeCVSS 9.3
• CVE-2026-93034SGLang / SGLangCVSS 9.8
• CVE-2026-14992IBM / DataPower Gateway 10.6CD · +3CVSS 9.8
• CVE-2026-14988IBM / DataPower Gateway 10.6CD · +3CVSS 9.8
• CVE-2026-14508IBM / DataPower Gateway 10.6CD · +3CVSS 9.1
• CVE-2026-14502IBM / DataPower Gateway 10.6CD · +3CVSS 9.8
• CVE-2026-14269IBM / DataPower Gateway 10.6CD · +3CVSS 9.8
• CVE-2026-107640Integrics / EnswitchCVSS 9.3