Veille CVE

Mercredi 14 octobre 2026

7 CVE

Critique 4 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm datapower gateway » ✕
  1. CVE-2026-14507 7.7 Élevée

    IBM DataPower Gateway 11.0.0 · Ibm datapower gateway

    IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.

  2. CVE-2026-14508 9.1 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free.

  3. CVE-2026-14509 5.9 Moyenne

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.

  4. CVE-2026-14888 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.

  5. CVE-2026-14988 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.

  6. CVE-2026-14992 9.8 Critique

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.

  7. CVE-2026-14999 7.5 Élevée

    IBM DataPower Gateway 10.6CD · IBM DataPower Gateway 10.6.0 · IBM DataPower Gateway 11.0.0 · IBM DataPower Gateway 10.5.0

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures.