CVE-2026-16111CWE-843

CVE-2026-16111

High · published October 8, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.7th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2026-10-08T18:16Z
Affected products (4)
ProductVersionsFixed in
ibm/datapower_gateway≥ 10.5.0.0, < 10.5.0.2310.5.0.23
ibm/datapower_gateway≥ 10.6.0.0, < 10.6.0.1110.6.0.11
ibm/datapower_gateway≥ 10.6.1.0, < 11.0.0.311.0.0.3
ibm/datapower_gateway≥ 11.0.0.0, < 11.0.0.311.0.0.3
References (1)
https://www.ibm.com/support/pages/node/7289775 · [email protected]
EPSS history
Timeline
  • 10 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 08 OCT 13:28Z
    IBM DataPower Gateway Type Confusion
    cvelistv5
  • 08 OCT 13:28Z
    IBM DataPower Gateway Type Confusion
    cvelistv5