CVE-2026-14521

MediumCVSS 4.9/10Last modified Oct 15, 2026

Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

Vendor	Product	Versions
IBM	DataPower Gateway 10.6CD	>= 10.6.1, <= 10.6.6
IBM	DataPower Gateway 10.6.0	>= 10.6.0.0, <= 10.6.0.10
IBM	DataPower Gateway 11.0.0	>= 11.0.0.0, <= 11.0.0.2
IBM	DataPower Gateway 10.5.0	>= 10.5.0.0, <= 10.5.0.22

References

https://www.ibm.com/support/pages/node/7285636Vendor Advisory

Timeline

Published: Oct 8, 2026
Last modified: Oct 15, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-145229.8IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary com CVE-2026-145249.1The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proS CVE-2026-145259.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentica CVE-2026-145269.8The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. T CVE-2026-145287.5IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.CVE-2026-145299.8IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulner CVE-2026-14539.8A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or CVE-2026-145324.3IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that c CVE-2026-145348.8Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and at CVE-2026-145359.8In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.short CVE-2026-145368.8Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attacker with valid user c CVE-2026-145379.8Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthent