VDB
CVE-2026-14507
CVE-2026-14507
PUBLISHED
CVSS 7.7 HIGH
Reported by ibm · Published October 8, 2026
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.
Risk Scores
CVSS 3.1
7.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM | DataPower Gateway 11.0.0 | 11.0.0.0 |
| IBM | DataPower Gateway 11.0.0 | 11.0.0.0 |
Timeline
- Sep 28, 2026 CVE Published
- Oct 9, 2026 EPSS Score
- Oct 13, 2026 EPSS Score
- Oct 15, 2026 EPSS Score