Description
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures.
Published: 2026-10-08
Score: 7.4 High
EPSS: < 1% Very Low
KEV: No
Impact: Bypass authentication via forged JSON Web Signatures
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is an improper verification of cryptographic signatures used to validate JSON Web Signatures. By forging a valid signature, an attacker can bypass authentication controls on the IBM DataPower Gateway. This flaw is classified as CWE‑347 and can lead to unauthorized access to protected services.

Affected Systems

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2 are affected. Fixed releases include 10.5.0.23, 10.6.0.11, 10.6.1 through 10.6.6.1, and 11.0.0.3 and later.

Risk and Exploitability

The CVSS score of 7.4 indicates a medium‑to‑high severity, and the flaw is exploitable remotely via the network signature verification process. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known widespread exploitation yet. Nonetheless, attackers could remotely forge signatures to gain unauthorized access or execute arbitrary requests, potentially leading to a full compromise of the gateway. Prompt patching is recommended.

Generated by OpenCVE AI on October 8, 2026 at 17:26 UTC.

Remediation

Vendor Solution

IBM strongly advises upgrading as soon as possible. Known Issue: DT499224 https://www.ibm.com/mysupport/s/defect/aCIgJ000000IiH7/dt499224 Affected VersionsFixed in ReleaseIBM DataPower Gateway 10.6CD 10.6.1 - 10.6.611.0.0.3IBM DataPower Gateway 10.6.0 10.6.0.0 - 10.6.0.1010.6.0.11IBM DataPower Gateway 11.0.0 11.0.0.0 - 11.0.0.211.0.0.3IBM DataPower Gateway 10.5.0 10.5.0.0 - 10.5.0.2210.5.0.23

OpenCVE Recommended Actions

  • Upgrade to any IBM DataPower Gateway release that includes the cryptographic signature fix, such as 10.6.0.11 or newer, 10.6.1 through 10.6.6.1, 10.5.0.23 or newer, or 11.0.0.3 or newer.
  • Ensure that the gateway’s JSON Web Signature verification is actively enabled and that only trusted issuers are allowed; re‑enable strict signature checks if they have been disabled or misconfigured.
  • Configure logging and monitoring to detect anomalous authentication attempts using forged signatures and alert administrators of possible exploitation attempts.

Generated by OpenCVE AI on October 8, 2026 at 17:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Ibm datapower Gateway
CPEs cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:-:*:*:*
cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:continuous_delivery:*:*:*
Vendors & Products Ibm datapower Gateway

Fri, 09 Oct 2026 05:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentication by forging valid JSON Web Signatures due to improper verification of cryptographic signatures.
Title IBM DataPower Gateway Improper Verification of Cryptographic Signature
First Time appeared Ibm
Ibm datapower Gateway 1050
Ibm datapower Gateway 1060
Ibm datapower Gateway 106cd
Ibm datapower Gateway 1100
Weaknesses CWE-347
CPEs cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1050:10.5.0.22:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1060:10.6.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_106cd:10.6.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1100:11.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:datapower_gateway_1100:11.0.0.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm datapower Gateway 1050
Ibm datapower Gateway 1060
Ibm datapower Gateway 106cd
Ibm datapower Gateway 1100
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Ibm Datapower Gateway Datapower Gateway 1050 Datapower Gateway 1060 Datapower Gateway 106cd Datapower Gateway 1100
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-09T03:55:46.847Z

Reserved: 2026-07-07T19:27:03.933Z

Link: CVE-2026-14999

cve-icon Vulnrichment

Updated: 2026-10-08T15:53:03.771Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-08T15:17:50.360

Modified: 2026-10-14T19:41:36.160

Link: CVE-2026-14999

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T20:45:14Z

Weaknesses
  • CWE-347

    Improper Verification of Cryptographic Signature