Loading vulnerability…
Buffer Overflow in IBM DataPower Gateway
CVE-2026-14991 is a buffer overflow caused by improper bounds checking in IBM DataPower Gateway versions 10.5.0.0–10.5.0.22, 10.6.0.0–10.6.0.10, 10.6.1–10.6.6, and 11.0.0.0–11.0.0.2. The out-of-bounds write can allow arbitrary code execution on the affected system. The vulnerable function and input interface are not identified. The vulnerability description specifies exploitation by a local user, whereas the published CVSS v3.1 vector indicates unauthenticated network exploitation; the actual access requirements remain unresolved.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can execute arbitrary code on the affected gateway, potentially compromising confidentiality, integrity, and availability. The published CVSS v3.1 score is 9.8, with high impact in all three categories. The execution privilege level and whether exploitation enables privilege escalation are not specified.
If you can’t patch tonight, do this now.
No official workaround is documented. Pending patching, restrict gateway management and API access to trusted networks, limit local access, and apply network segmentation as defense-in-depth measures. Monitor anomalous process crashes, gateway restarts, and repeated service interruptions. These measures are not confirmed to block exploitation and do not replace the security update.
Patch, then assume compromise.
Apply the applicable IBM security update. The identified upgrade destinations are 10.5.0.23 for affected 10.5.0 releases, 10.6.0.11 for affected 10.6.0 releases, and 11.0.0.3 for affected 11.0.0 releases. For affected 10.6CD releases 10.6.1–10.6.6, the identified migration destination is 11.0.0.3. Confirm release-specific applicability and migration requirements against IBM's security bulletin before deployment.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.