CVE-2026-16163
8.6 HIGHPublished 2026-10-08 · Updated 2026-10-15
AI risk analysis
- Summary
- This flaw allows a remote attacker to cause memory corruption in IBM DataPower Gateway versions through 10.6.6 and 11.0.0.2, posing a significant security risk.
- Exploitability
- Exploitation is moderately difficult requiring specific conditions and knowledge of the target version.
- Blast radius
- If exploited, this could lead to complete system compromise and potential data loss or corruption.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to IBM DataPower Gateway 10.5.0.23 or later, 10.6.7 or later, or 11.0.1 or later.
memory-corruptionremote-code-executionwebibm
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Weaknesses
CWE-787
Vendors
ibm
Products
datapower gateway
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-14992
- HIGHCVE-2026-56153
- HIGHCVE-2026-56449
- HIGHCVE-2026-100850PoC
- CRITICALCVE-2026-101986
- HIGHCVE-2026-107911PoC
- HIGHCVE-2026-15307PoC
- HIGHCVE-2026-18813PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.