Description
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free.
Published: 2026-10-08
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service and Information Disclosure
Action: Patch ASAP
AI Analysis

Impact

An use‑after‑free bug in IBM DataPower Gateway allows an attacker to trigger a denial of service and access sensitive information. The flaw occurs when the gateway frees an object that is still referenced, leading to memory corruption that can be exploited to crash the service or leak internal state. It is classified as CWE-416.

Affected Systems

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2 are affected. Fixed releases include 10.6CD 10.6.1 (up to 10.6.6.11.0.0.3), 10.6.0 firmware 10.6.0.1010.6.0.11, 11.0.0 firmware 11.0.0.211.0.0.3, and 10.5.0 firmware 10.5.0.2210.5.0.23.

Risk and Exploitability

The CVSS score of 6.5 indicates a medium impact. EPSS is not available, and the vulnerability is not listed in CISA KEV. The attack vector is inferred to be remote, likely via a network interface exposed to the gateway, because the official description mentions a remote attacker and no explicit local conditions are cited. The lack of an EPSS score and KEV listing suggests limited publicly documented exploitation, but the potential for denial of service and information leakage warrants prompt attention.

Generated by OpenCVE AI on October 8, 2026 at 17:25 UTC.

Remediation

Vendor Solution

IBM strongly advises upgrading as soon as possible. Known Issue: DT499224 https://www.ibm.com/mysupport/s/defect/aCIgJ000000IiH7/dt499224 Affected VersionsFixed in ReleaseIBM DataPower Gateway 10.6CD 10.6.1 - 10.6.611.0.0.3IBM DataPower Gateway 10.6.0 10.6.0.0 - 10.6.0.1010.6.0.11IBM DataPower Gateway 11.0.0 11.0.0.0 - 11.0.0.211.0.0.3IBM DataPower Gateway 10.5.0 10.5.0.0 - 10.5.0.2210.5.0.23

OpenCVE Recommended Actions

  • Upgrade to any IBM DataPower Gateway firmware that includes the fix, specifically the releases listed as fixed: 10.6CD ranging from 10.6.1 to 10.6.6.11.0.0.3, 10.6.0 firmware from 10.6.0.0 up to 10.6.0.1010.6.0.11, 11.0.0 firmware from 11.0.0.0 up to 11.0.0.211.0.0.3, and 10.5.0 firmware from 10.5.0.0 up to 10.5.0.2210.5.0.23.
  • If a firmware upgrade cannot be performed immediately, isolate the gateway from external networks by deploying it behind a firewall or VPN and restrict inbound connections to trusted sources.
  • Disable any unused interfaces or services on the gateway to minimize the attack surface, ensuring only necessary ports remain open.
  • Continuously monitor gateway logs and system performance for signs of abnormal activity such as unexpected crashes or memory usage anomalies, and consider implementing network segmentation to contain potential impacts.

Generated by OpenCVE AI on October 8, 2026 at 17:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Ibm datapower Gateway
CPEs cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:-:*:*:*
cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:continuous_delivery:*:*:*
Vendors & Products Ibm datapower Gateway

Thu, 08 Oct 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free.
Title IBM DataPower Gateway Use After Free
First Time appeared Ibm
Ibm datapower Gateway 1050
Ibm datapower Gateway 1060
Ibm datapower Gateway 106cd
Ibm datapower Gateway 1100
Weaknesses CWE-416
CPEs cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.22:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1100:11.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1100:11.0.0.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm datapower Gateway 1050
Ibm datapower Gateway 1060
Ibm datapower Gateway 106cd
Ibm datapower Gateway 1100
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H'}

Subscriptions

Ibm Datapower Gateway Datapower Gateway 1050 Datapower Gateway 1060 Datapower Gateway 106cd Datapower Gateway 1100
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-08T14:32:05.944Z

Reserved: 2026-07-02T18:51:58.566Z

Link: CVE-2026-14508

cve-icon Vulnrichment

Updated: 2026-10-08T14:31:58.392Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T15:17:49.413

Modified: 2026-10-14T20:03:55.157

Link: CVE-2026-14508

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T17:30:17Z

Weaknesses