{"id":"CVE-2026-14992","published":"2026-10-08T15:17:50.210","lastModified":"2026-10-14T19:47:01.233","description":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":["ibm"],"products":["datapower gateway"],"references":[{"url":"https://www.ibm.com/support/pages/node/7289775","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows a buffer overflow, which can lead to remote code execution or denial of service. It affects multiple versions of IBM DataPower Gateway and is critical due to the potential for severe impact.","exploitability":"Exploitation is relatively straightforward given the buffer overflow, requiring only the ability to send crafted input to the affected service.","blast_radius":"If exploited, this could result in complete control of the affected DataPower Gateway instance, leading to data loss, service disruption, or unauthorized access.","remediation":"Upgrade to IBM DataPower Gateway 10.5.0.23 or later, 10.6.7 or later, 10.6.11 or later, or 11.0.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","remote-code-execution","web","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:07.023Z"}}