Loading story…
dCERT issued two advisories for IBM DataPower Gateway warning that vulnerabilities in the platform could allow denial-of-service (DoS) conditions. The notices identify the affected product as IBM DataPower Gateway and indicate that successful exploitation could disrupt service availability, raising operational risk for organizations that rely on the gateway for application integration, API security, and traffic handling.
The advisories, tracked as 2026-0926 and 2026-1003, show continued disclosure activity around DoS weaknesses affecting the product. While the notices provide limited public technical detail, the repeated alerts indicate that defenders using IBM DataPower Gateway should review vendor guidance, assess exposure across deployments, and prioritize remediation or mitigations to reduce the risk of service interruption.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
dCERT published advisory 2026-1019 warning of an IBM DataPower Gateway vulnerability that could allow denial of service. No additional technical details or remediation information are provided in the reference.
dCERT published advisory 2026-1003 concerning an IBM DataPower Gateway denial-of-service vulnerability. Based on the references, this appears to be a separate advisory or update disclosed after the earlier notice.
dCERT issued advisory 2026-0926 warning that an IBM DataPower Gateway vulnerability could allow denial of service. No additional technical details or remediation information are provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
dcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISA released a series of Industrial Control System (ICS) security advisories addressing vulnerabilities in a wide range of products from vendors such as Advantech, Axis Communications, Hitachi Energy, Inductive Automation, Johnson Controls, Mitsubishi Electric, National Instruments, Rockwell Automation, Schneider Electric, and Siemens. These advisories urge administrators to review mitigation steps and apply available updates to protect critical infrastructure systems from potential exploitation. Separately, IBM published security advisories for multiple enterprise products, including IBM API Connect, CloudPak for AIOps, DataPower Gateway, Db2, QRadar Suite, and Watson services, among others. The advisories highlight critical updates and recommend immediate patching to address identified vulnerabilities. Both CISA and IBM emphasize the importance of timely remediation to reduce risk exposure in operational and enterprise environments.
Jun 29, 2026
dCERT issued two advisories covering **multiple vulnerabilities** in **IBM App Connect Enterprise**, indicating ongoing security issues affecting the enterprise integration platform. The advisories, `2026-0874` and `2026-0987`, both identify IBM App Connect Enterprise as the impacted product, though no public synopsis was provided in the referenced notices. The repeated publication of advisories for the same IBM product suggests organizations using App Connect Enterprise should review the associated vendor and dCERT guidance, identify affected versions, and prioritize patching or other mitigations. Security teams should also assess exposure in environments where the platform handles critical application and data flows, as vulnerabilities in integration middleware can create broad operational and security risk.
Jun 29, 2026
IBM disclosed several security issues affecting products across its portfolio, including **IBM Cloud Databases for PostgreSQL**, **WebSphere Application Server**, **Liberty**, **IBM HTTP Server**, and **IBM Security Guardium**. The referenced advisories indicate exposure to widely tracked vulnerabilities such as the OpenSSL certificate parsing flaws `CVE-2022-3786` and `CVE-2022-3602`, alongside a Guardium command execution issue tracked as `CVE-2023-35893`. The notices show IBM assessing and publishing product-specific impact information through support bulletins and X-Force Exchange reporting, with Guardium highlighted for command execution risk and other enterprise offerings reviewed for inherited third-party component exposure. The disclosures underscore the need for organizations using affected IBM platforms to verify product impact, review vendor bulletins, and apply available fixes or mitigations to reduce the risk of exploitation in database, application server, web server, and data security environments.
Jul 12, 2026