IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7285636 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Oct 2026, 00:04
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm datapower Gateway |
|
| References | () https://www.ibm.com/support/pages/node/7285636 - Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:-:*:*:* cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:* |
08 Oct 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. |
08 Oct 2026, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-08 13:17
Updated : 2026-10-15 00:04
NVD link : CVE-2026-14521
Mitre link : CVE-2026-14521
CVE.ORG link : CVE-2026-14521
JSON object : View
Products Affected
ibm
- datapower_gateway
CWE
CWE-918
Server-Side Request Forgery (SSRF)