Login Request a demo
DG
Product
DataPower Gateway
by IBM · last CVE Oct 8, 2026
81
CVEs
0
On KEV
9.8
Max CVSS
39
New 30D
Vulnerabilities81In the news0Timeline
Severity mix
Critical 11High 40Medium 27Low 1
Severity
All severities81Critical11High40Medium27Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add DataPower Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-14269
9.8
0%
Oct 8
IBM DataPower Gateway Buffer Overflow
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-14502
9.8
0%
Oct 8
IBM DataPower Gateway Improper Authentication
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-14888
9.8
0%
Oct 8
IBM DataPower Gateway Buffer Overflow
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-14988
9.8
0%
Oct 8
IBM DataPower Gateway Out-of-bounds Read
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-14992
9.8
0%
Oct 8
IBM DataPower Gateway Out-of-bounds Write
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-14991
9.8
0%
Oct 8
IBM DataPower Gateway Out-of-bounds Write
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-15762
9.8
1%
Oct 8
IBM DataPower Gateway Out-of-bounds Write
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2026-16340
9.8
0%
Oct 8
IBM DataPower Gateway Out-of-bounds Write
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2019-4621
9.8
2%
Dec 9
IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default administrator account that is enabled if the IPMI LAN channel is enabled
Affected: 7.6.0.0 through 7.6.0.14; 2018.4.1.0 through 2018.4.1.5
CVE-2026-14508
9.1
0%
Oct 8
IBM DataPower Gateway Use After Free
Affected: 10.5.0.0 before 10.5.0.23; 10.6.0.0 before 10.6.0.11; 10.6.1.0 before 11.0.0.3; 11.0.0.0 before 11.0.0.3
CVE-2022-31775
9.1
1%
Jul 31
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to an XML External Entity Injection (XXE)…
Affected: 2018.4.1.0; 10.0.1.0; 10.0.2.0; 10.0.4.0; 10.5.0.0; 2018.4.1.20; +1 more
Showing 11