CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-105405 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105404 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105403 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105402 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105401 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105400 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105399 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105398 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-16167 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking. | Oct 8, 2026 | |
| CVE-2026-16165 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference. | Oct 8, 2026 | |
| CVE-2026-16164 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow. | Oct 8, 2026 | |
| CVE-2026-16163 | HIGH | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-16161 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. | Oct 8, 2026 | |
| CVE-2026-16159 | HIGH | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-16111 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw. | Oct 8, 2026 | |
| CVE-2026-15824 | HIGH | 8.2 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow. | Oct 8, 2026 | |
| CVE-2026-15822 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads. | Oct 8, 2026 | |
| CVE-2026-15819 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator. | Oct 8, 2026 | |
| CVE-2026-15784 | HIGH | 8.1 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-15781 | HIGH | 8.0 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow. | Oct 8, 2026 | |
| CVE-2026-15762 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-14991 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system. | Oct 8, 2026 | |
| CVE-2026-16340 | CRITICAL | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write in the RFC2047 encoded-word parser. | Oct 8, 2026 | |
| CVE-2026-16182 | MEDIUM | 5.9 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing. | Oct 8, 2026 | |
| CVE-2026-16181 | HIGH | 7.4 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security restrictions due to improper authorization. | Oct 8, 2026 |