CVE-2026-16159

Summary

This flaw allows a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write, impacting IBM DataPower Gateway versions from 10.5.0.0 to 11.0.0.2.

Exploitability

Exploitation requires network access and knowledge of the specific configuration, making it moderately difficult.

Blast radius

If exploited, this could lead to unauthorized data exposure and service disruption for affected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM DataPower Gateway 10.5.0.23 or later, 10.6.7 or later, or 11.0.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.