IBM DataPower Gateway 10.6.0

Name: IBM DataPower Gateway 10.6.0
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

16critical50high29medium0low

updated 2026-10-27

vulnerabilities (205)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-53266US	—OT critical	0.93% (61st)	KEV	no fix	2026-06-25	≤ vers:unknown/*
CVE-2026-43284US	—	94.2% (100th)	Exploit	no fix	2026-05-08	≤ vers:unknown/*
CVE-2026-46300US	high7.8	10.2% (96th)	Exploit	no fix	2026-05-23	≤ vers:unknown/*
CVE-2026-46242US	—	4.39% (91st)	Exploit	no fix	2026-05-30	≤ vers:unknown/*
CVE-2026-46333US	—	4.30% (91st)	Exploit	no fix	2026-05-15	≤ vers:unknown/*
CVE-2026-43499US	—	0.89% (59th)	Exploit	no fix	2026-05-21	≤ vers:unknown/*
CVE-2026-43501US	—	0.73% (54th)	Exploit	no fix	2026-05-21	≤ vers:unknown/*
CVE-2026-46331US	—	0.64% (50th)	Exploit	no fix	2026-06-16	≤ vers:unknown/*
CVE-2026-64560US	—	0.50% (43rd)	Exploit	no fix	2026-07-29	≤ vers:unknown/*
CVE-2026-53264US	—	0.48% (42nd)	Exploit	no fix	2026-06-25	≤ vers:unknown/*
CVE-2026-43074US	—	0.48% (41st)	Exploit	no fix	2026-05-06	≤ vers:unknown/*
CVE-2025-39866US	high7.8	0.31% (24th)	Exploit	no fix	2025-09-19	≤ vers:unknown/*
CVE-2026-52923US	—	0.21% (12th)	Exploit	no fix	2026-06-24	≤ vers:unknown/*
CVE-2026-23002US	medium5.5	0.18% (7th)	Exploit	no fix	2026-01-25	≤ vers:unknown/*
CVE-2026-33845US	critical9.1	2.07% (81st)	—	no fix	2026-04-30	≤ vers:unknown/*
CVE-2026-23455US	—	1.53% (75th)	—	no fix	2026-04-03	≤ vers:unknown/*
CVE-2026-42009US	—	1.33% (71st)	—	no fix	2026-05-18	≤ vers:unknown/*
CVE-2026-2100US	high7.5	1.31% (71st)	—	no fix	2026-03-26	≤ vers:unknown/*
CVE-2026-33846US	—	1.26% (70th)	—	no fix	2026-05-04	≤ vers:unknown/*
CVE-2026-41602US	—	1.16% (67th)	—	no fix	2026-04-28	≤ vers:unknown/*
CVE-2026-41606US	—	1.10% (66th)	—	no fix	2026-04-28	≤ vers:unknown/*
CVE-2026-58662US	critical9.1	1.08% (65th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-42010US	critical9.8	1.05% (64th)	—	no fix	2026-05-07	≤ vers:unknown/*
CVE-2025-48431US	—	1.04% (64th)	—	no fix	2026-04-28	≤ vers:unknown/*
CVE-2026-55968US	high7.5	1.03% (64th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-63913US	—	0.97% (62nd)	—	no fix	2026-07-19	≤ vers:unknown/*
CVE-2026-41607US	—	0.90% (59th)	—	no fix	2026-04-28	≤ vers:unknown/*
CVE-2026-58015US	high7.5	0.84% (58th)	—	no fix	2026-06-30	≤ vers:unknown/*
CVE-2025-14087US	critical9.8	0.83% (57th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2026-3832US	—	0.80% (57th)	—	no fix	2026-04-30	≤ vers:unknown/*
CVE-2026-55970US	medium6.5	0.78% (56th)	—	no fix	2026-07-27	≤ vers:unknown/*
CVE-2026-5260US	—	0.77% (55th)	—	no fix	2026-05-26	≤ vers:unknown/*
CVE-2026-42015US	—	0.73% (54th)	—	no fix	2026-05-26	≤ vers:unknown/*
CVE-2026-43868US	—	0.71% (53rd)	—	no fix	2026-05-05	≤ vers:unknown/*
CVE-2026-43037US	—	0.69% (53rd)	—	no fix	2026-05-01	≤ vers:unknown/*
CVE-2026-12143US	—	0.67% (52nd)	—	no fix	2026-06-12	≤ vers:unknown/*
CVE-2026-59880US	high7.5	0.66% (52nd)	—	no fix	2026-07-08	≤ vers:unknown/*
CVE-2026-64530US	—	0.66% (51st)	—	no fix	2026-07-26	≤ vers:unknown/*
CVE-2026-83616US	—	0.61% (49th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83608US	—	0.61% (49th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83607US	—	0.61% (49th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83605US	—	0.61% (49th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83613US	—	0.60% (49th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83615US	—	0.59% (48th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83614US	—	0.59% (48th)	—	no fix	2026-09-01	≤ vers:unknown/*
CVE-2025-14512US	—	0.58% (47th)	—	no fix	2025-12-11	≤ vers:unknown/*
CVE-2026-59879US	high7.5	0.57% (47th)	—	no fix	2026-07-08	≤ vers:unknown/*
CVE-2026-14497US	high8.1	0.57% (47th)	—	no fix	2026-10-08	≤ vers:unknown/*
CVE-2026-3833US	high7.4	0.56% (47th)	—	no fix	2026-04-30	≤ vers:unknown/*
CVE-2026-58014US	high8.6	0.56% (46th)	—	no fix	2026-06-30	≤ vers:unknown/*

showing 50 of 205

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free35 CVEs
CWE-787Out-of-bounds Write26 CVEs
CWE-20Improper Input Validation24 CVEs
CWE-125Out-of-bounds Read15 CVEs
CWE-825Expired Pointer Dereference14 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')13 CVEs
CWE-400Uncontrolled Resource Consumption10 CVEs
CWE-284Improper Access Control9 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)200 CVEs
EUEU Vulnerability Database (ENISA)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan