VDB

CVE-2026-14273

CVE-2026-14273 PUBLISHED CVSS 6.5 MEDIUM

Reported by ibm · Published October 8, 2026

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
IBMDataPower Gateway 10.6CD10.6.1
IBMDataPower Gateway 10.6.010.6.0.0
IBMDataPower Gateway 11.0.011.0.0.0
IBMDataPower Gateway 10.5.010.5.0.0
IBMDataPower Gateway 10.6CD10.6.1
IBMDataPower Gateway 10.5.010.5.0.0
IBMDataPower Gateway 11.0.011.0.0.0
IBMDataPower Gateway 10.6.010.6.0.0

Timeline

  • Sep 28, 2026 CVE Published
  • Oct 9, 2026 EPSS Score

References

  • vendor-advisorypatch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›