CVE-2026-14991: falha crítica em IBM DataPower Gateway 10.5.0
IBM DataPower Gateway Out-of-bounds Write
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.4%
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · DataPower Gateway 10.5.0IBM · DataPower Gateway 10.6.0IBM · DataPower Gateway 10.6CDIBM · DataPower Gateway 11.0.0CVEs relacionadas — IBM DataPower Gateway 10.5.0
No mesmo produto, das mais perigosas para as menos.
CVE-2026-14497HIGHIBM DataPower Gateway Improper Verification of Cryptographic SignatureEPSS 0.6%CVE-2026-12733HIGHIBM DataPower Gateway affected by denial of serviceEPSS 0.5%CVE-2026-15762CRITICALIBM DataPower Gateway Out-of-bounds WriteEPSS 0.5%CVE-2026-16340CRITICALIBM DataPower Gateway Out-of-bounds WriteEPSS 0.5%CVE-2026-14269CRITICALIBM DataPower Gateway Buffer OverflowEPSS 0.5%CVE-2025-36374MEDIUMIBM DataPower Gateway affected by XML external entity injectionEPSS 0.4%