CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-14496 | HIGH | 8.2 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow. | Oct 8, 2026 | |
| CVE-2026-14273 | MEDIUM | 6.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization. | Oct 8, 2026 | |
| CVE-2026-14269 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary code on the system. | Oct 8, 2026 | |
| CVE-2026-13258 | MEDIUM | 5.4 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | Oct 8, 2026 | |
| CVE-2026-13257 | MEDIUM | 6.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity. | Oct 8, 2026 | |
| CVE-2026-12859 | MEDIUM | 6.5 | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: before v1046. | Oct 8, 2026 | |
| CVE-2026-107565 | MEDIUM | 5.1 | A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free space or over existing records. This issue can corrupt stored encrypted payload data or existing metadata, potentially rendering the affected data inaccessible. | Oct 8, 2026 | |
| CVE-2026-105827 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105826 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105825 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105824 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105823 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105405 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105404 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105403 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105402 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105401 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105400 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105399 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105398 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-16167 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking. | Oct 8, 2026 | |
| CVE-2026-16165 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference. | Oct 8, 2026 | |
| CVE-2026-16164 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow. | Oct 8, 2026 | |
| CVE-2026-16163 | HIGH | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-16161 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. | Oct 8, 2026 |