CRITICAL 9.8 NVD

CVE-2026-14502

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.

References

https://www.ibm.com/support/pages/node/7289775

Published: 2026-10-08 · Source: NVD · Feed updated: 2026-10-12

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-08 via NVD.

Risk Timeline

CVE Disclosed2026-10-08 · 3 days ago

Remediation Resources

Analysis & PoC

www.ibm.com/support/pages/node/7289775

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.