Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write in the RFC2047 encoded-word parser.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
IBM fixes 23 IBM DataPower Gateway vulnerabilities, including critical RCE flaws CVE-2026-15762 and CVE-2026-16340. Upgrade to 11.0.0.3 now. #IBM #DataPower #APIGateway #CVE202615762 #CVE202616340 #CVE202614990 #RCE #Vulnerability https://securityonline.info/ibm-datapower-gateway-vulnerabilities/
Unpatched vulnerabilities don't stay hidden on our atlas. #CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-16340 Vendor → Unknown Severity → Critical — CVSS 9.8 Product → Unknown Date → 2026-10-08 A critical vulnerability (Out-of-bounds Write) has been disclosed affecting Unknown. Patch immediately. Powered by @Brandefense #ThreatIntel #CyberSecurity #CVE #Unknown
IBM DataPower Gateway faces CVE-2026-16340 scoring 9.8. • Remote code execution possible • Out-of-bounds write tied to RFC2047 parser • Hits listed releases across 10.5 to 11.0 lines https://thecircuitry.to/article/cve-2026-16340-rated-critical-in-ibm-datapower-gateway-muzl7549 https://t.co/XIphV3QHkO