{"id":"CVE-2026-15781","published":"2026-10-08T14:16:52.037","lastModified":"2026-10-15T00:02:25.090","description":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.","cvssScore":8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":["ibm"],"products":["datapower gateway"],"references":[{"url":"https://www.ibm.com/support/pages/node/7289775","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in IBM DataPower Gateway allows authenticated attackers to execute arbitrary code remotely, potentially leading to full system compromise. This affects multiple versions of the DataPower Gateway appliance.","exploitability":"Exploitation requires an authenticated user with access to the DataPower management interface, making it moderately difficult but not impossible to achieve, especially in environments where administrative credentials are accessible or can be obtained through other means.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over affected DataPower appliances, potentially enabling them to intercept, modify, or redirect traffic through the gateway, with impact extending to all services protected by the compromised appliance.","remediation":"Upgrade to IBM DataPower Gateway 10.5.0.23, 10.6.7, 10.6.0.11, or 11.0.0.3 which contain the fix for this buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","gateway","buffer-overflow","ibm"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:20:52.579Z"}}