As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0431 Vulnerabilities fixed in IBM DataPower Gateway and underlying components
IBM resolved multiple security vulnerabilities in DataPower Gateway versions 10.5 through 11.0 and underlying components, addressing issues such as use-after-free bugs, race conditions, buffer overflows, and cryptographic errors. An attacker could exploit these flaws to achieve remote code execution, denial of service, cross-site scripting, or authorization bypass, with some attacks requiring authentication and others not. IBM also incorporated previously released updates from underlying subcomponents into DataPower Gateway's software stack.
Why it matters: Organizations running DataPower Gateway versions 10.5 to 11.0 must evaluate and apply these fixes promptly, particularly if systems are internet-facing or process sensitive data, as unauthenticated remote code execution is possible.
- Source published
- First seen by Cybersecurity Tracker