Security
Loading…

CVE-2026-13257

MEDIUMCVSS 6.5
View on NVD← Back to search
Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

Timeline
Published:October 8th, 2026 3:17 PM
Last modified:October 14th, 2026 11:59 PM
CVSS Scoring

CVSS v3: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Software
From NVD CPE configuration data

Vendors

ibm

Products

datapower_gateway
Weaknesses (CWE)
CWE-345
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute