CVE-2026-16161

Summary

IBM DataPower Gateway suffers from an out-of-bounds read vulnerability that can lead to denial of service, allowing attackers to crash the system without requiring authentication or user interaction.

Exploitability

Exploitation appears straightforward with no special preconditions required, as the vulnerability is remotely accessible and affects unauthenticated endpoints.

Blast radius

The impact could be significant across all affected DataPower Gateway versions, potentially causing widespread service disruption for organizations relying on the gateway for API management and security functions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM DataPower Gateway 10.5.0.23, 10.6.7, 10.6.0.11, or 11.0.0.3 to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.