{"id":"CVE-2026-16164","published":"2026-10-08T14:16:53.373","lastModified":"2026-10-15T00:00:07.820","description":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-787"],"vendors":["ibm"],"products":["datapower gateway"],"references":[{"url":"https://www.ibm.com/support/pages/node/7289775","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in IBM DataPower Gateway allows remote attackers to cause a denial of service by sending specially crafted input that exceeds allocated buffer space, potentially leading to application crashes or unavailability.","exploitability":"Exploitation appears moderately difficult as it likely requires crafting specific network requests that trigger the buffer overflow condition, though no public exploit references are available and the exact triggering conditions are not detailed in the description.","blast_radius":"If exploited, this vulnerability could impact all services running through the affected DataPower Gateway versions, potentially causing widespread service disruption across multiple applications that depend on the gateway for traffic management and security functions.","remediation":"Upgrade to IBM DataPower Gateway 10.5.0.23, 10.6.7, 10.6.0.11, or 11.0.0.3 to address this buffer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","gateway","ibm","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:26:23.307Z"}}