HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-14507 — IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticat...

·Source: NIST NVD

Updated:

Executive Summary

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.

Analysis

IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation. CVSS Score: 7.7. Published: 2026-10-08T15:17:49.283.

Indicators of Compromise (3)

CVE (1)
CVE-2026-14507
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerabilityNEW

Microsoft pulls out of Nscale UK datacentre plan

Tech giant Microsoft has abandoned plans to lease computing capacity from a datacentre planned to be the largest in the UK

Finextra
LOWVulnerability

ConnectWise backup credentials exposed multiple Microsoft 365 tenants

ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to authenticate into customer tenants, prompting Huntress to identify suspicious sign-ins across 162 organizations. The activity involved the Cloud Backup application obtaining Microsoft Graph acc

CSO Online