HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-14497 — IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0....

·Source: NIST NVD

Updated:

Executive Summary

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to bypass security restrictions due to improper verification of cryptographic signatures.

Analysis

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to bypass security restrictions due to improper verification of cryptographic signatures. CVSS Score: 8.1. Published: 2026-10-08T15:17:49.013.

Indicators of Compromise (7)

CVE (1)
CVE-2026-14497
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

LOWVulnerabilityNEW

UK sets out proposal to open up access to iPhone contactless payments

The UK's competition watchdog is consulting on proposals to unlock contactless technology on iPhones, making it easier for Apple Pay rivals to flourish by lowering fees and removing technical ​barriers.

Finextra
CRITICALVulnerabilityNEW

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned

Infosecurity Magazine
MEDIUMVulnerabilityNEW

CJIS v6.1 Compliance: 5 Practical Priorities for Agencies

CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness. [...]

BleepingComputer