Advisory · CVE-2026-14992
Buffer overflow in IBM DataPower Gateway
IBM DataPower Gateway is vulnerable to a remotely triggerable buffer overflow that can crash the appliance or worse.
- Vendor
- IBM
- Product
- DataPower Gateway
- Identifier / CWE
- CVE-2026-14992
CWE-787 - Action timing
- Immediate
Explain it like I’m five
The appliance trusts a number written on the outside of a package. If the number is a lie, the appliance pours more data into a fixed-size jar than it can hold.
- 01Malformed input
A remote attacker sends input sized to overrun a fixed buffer.
- 02Overflow
The appliance writes past the buffer boundary, corrupting memory.
- 03Crash or control
The process crashes, and crafted input can turn this into code execution.
What happened
IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a buffer overflow reachable by a remote attacker, according to the IBM security bulletin. IBM rates it critical at CVSS 9.8. Out-of-bounds writes in network-facing code are a classic path from crash to code execution.
What to do
- Identify DataPower Gateway appliances and confirm the running firmware version against the affected ranges.
- Apply the remediation from the IBM security bulletin as soon as it is available in your environment.
- Restrict management interfaces to trusted networks and watch for unexpected appliance restarts.
- Review appliance logs for crashes around the disclosure date.
Management note
A critical memory-safety flaw in the box that terminates your partner traffic deserves the same urgency as a remote-code-execution bug, because that is what it can become.