CyberICT

CVE-2026-14988

IBM · Published October 8, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.

Affected Products

  • Datapower Gateway < 10.5.0.23
  • Datapower Gateway < 10.6.0.11
  • Datapower Gateway < 11.0.0.3

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H