Vulnerability intelligence
CVE-2026-15762
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-10-08
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Oct 8, 2026 · latest Oct 8, 2026
Coverage timeline
-
IBM Patches 23 DataPower Gateway Flaws, Including Four Critical Bugssecurityonline.info · Oct 8, 2026