CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-107565 | MEDIUM | 5.1 | A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free space or over existing records. This issue can corrupt stored encrypted payload data or existing metadata, potentially rendering the affected data inaccessible. | Oct 8, 2026 | |
| CVE-2026-105827 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105826 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105825 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105824 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105823 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105405 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105404 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105403 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105402 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105401 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105400 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105399 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-105398 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected as a duplicate. | Oct 8, 2026 | |
| CVE-2026-16167 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking. | Oct 8, 2026 | |
| CVE-2026-16165 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference. | Oct 8, 2026 | |
| CVE-2026-16164 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow. | Oct 8, 2026 | |
| CVE-2026-16163 | HIGH | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-16161 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read. | Oct 8, 2026 | |
| CVE-2026-16159 | HIGH | 8.6 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write. | Oct 8, 2026 | |
| CVE-2026-16111 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw. | Oct 8, 2026 | |
| CVE-2026-15824 | HIGH | 8.2 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow. | Oct 8, 2026 | |
| CVE-2026-15822 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads. | Oct 8, 2026 | |
| CVE-2026-15819 | HIGH | 7.5 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator. | Oct 8, 2026 | |
| CVE-2026-15784 | HIGH | 8.1 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. | Oct 8, 2026 |