{"id":"CVE-2026-16169","published":"2026-10-08T13:17:15.520","lastModified":"2026-10-15T00:04:14.237","description":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":["ibm"],"products":["datapower gateway"],"references":[{"url":"https://www.ibm.com/support/pages/node/7289798","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"IBM DataPower Gateway suffers from uncontrolled resource consumption that can lead to denial of service, allowing remote attackers to exhaust system resources without requiring authentication or user interaction.","exploitability":"Exploitation is relatively straightforward as it requires no authentication or user interaction, though it may need specific input patterns to trigger the resource exhaustion condition.","blast_radius":"The impact could be significant across all services relying on the affected DataPower Gateway, potentially causing widespread service disruption for organizations using this gateway for API management and traffic routing.","remediation":"Upgrade to IBM DataPower Gateway 11.0.0.3 or later to address this resource consumption vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","gateway","resource-consumption"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:27:33.811Z"}}