← Back to search

CVE-2026-16163

8.6 HIGH

Published 2026-10-08 · Updated 2026-10-15

AI risk analysis

Summary
This flaw allows a remote attacker to cause memory corruption in IBM DataPower Gateway versions through 10.6.6 and 11.0.0.2, posing a significant security risk.
Exploitability
Exploitation is moderately difficult requiring specific conditions and knowledge of the target version.
Blast radius
If exploited, this could lead to complete system compromise and potential data loss or corruption.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to IBM DataPower Gateway 10.5.0.23 or later, 10.6.7 or later, or 11.0.1 or later.
memory-corruptionremote-code-executionwebibm

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Weaknesses

CWE-787

Vendors

ibm

Products

datapower gateway

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.