CRITICAL 9.8 NVD

CVE-2026-15762

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

References

https://www.ibm.com/support/pages/node/7289775

Published: 2026-10-08 · Source: NVD · Feed updated: 2026-10-12

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-08 via NVD.

Risk Timeline

CVE Disclosed2026-10-08 · 3 days ago

Remediation Resources

Analysis & PoC

www.ibm.com/support/pages/node/7289775

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.