CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:23 UTC )
This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product ibm:datapower_gateway_1100 . Show all products
40 CVEs, showing 1 to 40
CVE Severity Title Published CVE-2026-14269 Critical 9.8 IBM DataPower Gateway Buffer Overflow Assigned by ibm
Oct 8, 2026 CVE-2026-13257 Medium 6.5 IBM DataPower Gateway Insufficient Verification of Data Authenticity Assigned by ibm
Oct 8, 2026 CVE-2026-13258 Medium 5.4 IBM DataPower Gateway Cross-Site Scripting Assigned by ibm
Oct 8, 2026 CVE-2026-14273 Medium 6.5 IBM DataPower Gateway Incorrect Authorization Assigned by ibm
Oct 8, 2026 CVE-2026-14496 High 8.2 IBM DataPower Gateway Out-of-bounds Read Assigned by ibm
Oct 8, 2026 CVE-2026-14497 High 8.1 IBM DataPower Gateway Improper Verification of Cryptographic Signature Assigned by ibm
Oct 8, 2026 CVE-2026-14502 Critical 9.8 IBM DataPower Gateway Improper Authentication Assigned by ibm
Oct 8, 2026 CVE-2026-14507 High 7.7 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-14508 Medium 6.5 IBM DataPower Gateway Use After Free Assigned by ibm
Oct 8, 2026 CVE-2026-14509 Medium 5.9 IBM DataPower Gateway Denial of Service Assigned by ibm
Oct 8, 2026 CVE-2026-14888 High 8.1 IBM DataPower Gateway Buffer Overflow Assigned by ibm
Oct 8, 2026 CVE-2026-14905 High 8.2 IBM DataPower Gateway XXE Assigned by ibm
Oct 8, 2026 CVE-2026-14988 Medium 6.5 IBM DataPower Gateway Out-of-bounds Read Assigned by ibm
Oct 8, 2026 CVE-2026-14999 High 7.4 IBM DataPower Gateway Improper Verification of Cryptographic Signature Assigned by ibm
Oct 8, 2026 CVE-2026-14992 Critical 9.8 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-14991 Critical 9.8 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-15781 High 8.0 IBM DataPower Gateway Buffer Overflow Assigned by ibm
Oct 8, 2026 CVE-2026-15784 High 8.1 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-15762 Critical 9.8 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-15819 High 7.5 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-15822 High 7.5 IBM DataPower Gateway Denial of Service Assigned by ibm
Oct 8, 2026 CVE-2026-15824 High 8.2 IBM DataPower Gateway Denial of Service Assigned by ibm
Oct 8, 2026 CVE-2026-16111 High 7.5 IBM DataPower Gateway Type Confusion Assigned by ibm
Oct 8, 2026 CVE-2026-16159 High 8.6 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16161 High 7.5 IBM DataPower Gateway Out-of-bounds Read Assigned by ibm
Oct 8, 2026 CVE-2026-16164 High 7.5 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16165 High 7.5 IBM DataPower Gateway NULL Pointer Dereference Assigned by ibm
Oct 8, 2026 CVE-2026-16163 High 8.6 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16167 High 7.5 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16169 High 7.5 IBM DataPower Gateway Denial of Service Assigned by ibm
Oct 8, 2026 CVE-2026-16170 High 7.5 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16176 High 7.5 IBM DataPower Gateway Denial of Service Assigned by ibm
Oct 8, 2026 CVE-2026-16177 Medium 5.3 IBM DataPower Gateway Out-of-bounds Read Assigned by ibm
Oct 8, 2026 CVE-2026-16178 High 7.5 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16340 Critical 9.8 IBM DataPower Gateway Out-of-bounds Write Assigned by ibm
Oct 8, 2026 CVE-2026-16181 High 7.4 IBM DataPower Gateway Improper Authorization Assigned by ibm
Oct 8, 2026 CVE-2026-16179 High 7.5 IBM DataPower Gateway Buffer Underwrite Assigned by ibm
Oct 8, 2026 CVE-2026-16182 Medium 5.9 IBM DataPower Gateway NULL Pointer Dereference Assigned by ibm
Oct 8, 2026 CVE-2026-14521 Medium 4.9 IBM DataPower Gateway affected by server-side request forgery Assigned by ibm
Oct 8, 2026 CVE-2026-7366 Medium 4.2 IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall Assigned by ibm
Aug 12, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
