Vulnerability intelligence

CVE-2026-14991

IBM DataPower Gateway 10.6CD CWE-787

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

—

Awaiting FIRST.org data · checked 2026-10-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published