CVE-2026-7366 IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...

CVE-2026-7366

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...

CVE-2026-7366

IBM DataPower Gateway is affected by a race condition in the XML-Firewall’s handling of the built-in X‑Client‑IP header, causing improper isolation of request state across concurrent requests. This can enable IP spoofing and disclosure of other clients’ IP addresses. Affected versions include 11....

PT-2026-71351

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.1 IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.21 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.9 Description A race condition occurs during the handling of the built-in...

CVE-2026-7366: Concurrent Execution using Shared Resource with Improper Synchronization

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...

IBM DataPower Gateway Denial-of-Service Vulnerability (CNVD-2026-31545)

IBM DataPower Gateway is an enterprise-level data integration and security gateway product that provides features such as API management, message routing, and protocol conversion. There is a denial-of-service vulnerability in IBM DataPower Gateway. This vulnerability stems from improper resource...

CVE-2026-12733

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

CVE-2026-12733

IBM DataPower Gateway is affected by CVE-2026-12733 where denial of service can occur due to improper resource limitations (CWE-770). The advisory lists affected products/versions: DataPower Gateway 10.6CD (10.6.1–10.6.6), 10.6.0 (10.6.0.0–10.6.0.9), 11.0.0 (11.0.0.0–11.0.0.1), and 10.5.0 (10.5.0...

CVE-2026-12733 IBM DataPower Gateway affected by denial of service

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

CVE-2026-12733 IBM DataPower Gateway affected by denial of service

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

EUVD-2026-51259

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

EUVD-2025-210545

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2025-36374 IBM DataPower Gateway affected by XML external entity injection

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2025-36374 IBM DataPower Gateway affected by XML external entity injection

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2025-36374

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2025-36374

IBM DataPower Gateway is affected by CVE-2025-36374 due to an XML External Entity (XXE) vulnerability (CWE-611). The issue occurs when processing XML data and could allow a privileged user to expose sensitive information or exhaust memory. Affected products/versions include DataPower Gateway 10.6...

PT-2026-66555

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

PT-2026-66557

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway affected versions not specified Description Improper resource limitations may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2025-36374: Improper Restriction of XML External Entity Reference

IBM DataPower Gateway is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12733: Allocation of Resources Without Limits or Throttling

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...