Loading vulnerability…
Unauthenticated remote code execution in IBM DataPower Gateway
CVE-2026-15762 is an out-of-bounds write vulnerability in IBM DataPower Gateway affecting versions 10.5.0.0–10.5.0.22, 10.6.0.0–10.6.0.10, 10.6.1–10.6.6, and 11.0.0.0–11.0.0.2. A remote, unauthenticated attacker could exploit the memory-safety flaw to execute arbitrary code without user interaction. The vulnerable function and precise triggering input are not publicly specified in the available information. The vulnerability has a CVSS v3.1 score of 9.8 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could compromise the confidentiality, integrity, and availability of the affected gateway, allowing arbitrary code execution, exposure or modification of data processed by the gateway, and disruption of gateway services. The execution privilege level is not specified.
If you can’t patch tonight, do this now.
No official workaround is documented. Until updates can be installed, restrict gateway access to trusted networks and apply network segmentation to reduce exposure. Monitor anomalous process crashes, gateway restarts, service failovers, malformed traffic, and repeated service interruptions. These are compensating controls, not confirmed prevention of exploitation.
Patch, then assume compromise.
Install the applicable IBM security update: upgrade affected 10.5.0 releases to 10.5.0.23, affected 10.6.0 releases to 10.6.0.11, and affected 11.0.0 releases to 11.0.0.3. For affected 10.6CD releases 10.6.1–10.6.6, the identified upgrade destination is 11.0.0.3. Consult IBM's security bulletin for deployment-specific requirements.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.