High 7.5Published Jul 30, 2026

CVE-2026-12733IBM DataPower Gateway affected by denial of service

Updated under an hour ago (Oct 27, 2026, 6:40 AM ET)

Does this affect you?

It affects IBM DataPower Gateway 10.6CD and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for IBM DataPower Gateway 10.6CD

Exploited in the last 30 days

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-770
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: ibm
NVD analysis: Analyzed
Record last updated: Jul 31, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

IBM DataPower Gateway 10.6CD ibm:datapower_gateway_106cd	from 10.6.1 through 10.6.6	CNA record
IBM DataPower Gateway 10.6.0 ibm:datapower_gateway_1060	from 10.6.0.0 through 10.6.0.9	CNA record
IBM DataPower Gateway 11.0.0 ibm:datapower_gateway_1100	from 11.0.0.0 through 11.0.0.1	CNA record
IBM DataPower Gateway 10.5.0 ibm:datapower_gateway_1050	from 10.5.0.0 through 10.5.0.21	CNA record
ibm datapower_gateway ibm:datapower_gateway	from 10.5.0.0 before 10.5.0.22; from 10.6.0.0 before 10.6.0.10; from 10.6.1 through 10.6.6; from 11.0.0.0 before 11.0.0.2	NVD

References

References

https://www.ibm.com/support/pages/node/7278746	vendor-advisory, patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.