IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.
IBM · DataPower Gateway 10.6CD
IBM DataPower Gateway (product line 10.6CD) contains a buffer overflow flaw affecting multiple releases across the 10.5, 10.6 and 11.0 branches. The flaw is in the gateway's processing code, and the affected version ranges are listed in the advisory. An attacker with network access can trigger the overflow without authenticating or requiring any user interaction, which can lead to high impact on confidentiality, integrity and availability. No specific configuration prerequisites are indicated beyond the gateway being reachable over the network.
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Disclosed on 8 Oct 2026. No public exploit code or confirmed exploitation is recorded.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.