IBM DataPower Gateway up to 10.5.0.22/10.6.6/10.6.0.10/11.0.0.2 out-of-bounds write

Summaryinfo

A vulnerability was found in IBM DataPower Gateway up to 10.5.0.22/10.6.6/10.6.0.10/11.0.0.2. It has been rated as very critical. Impacted is an unknown function. This manipulation causes out-of-bounds write. This vulnerability is tracked as CVE-2026-16159. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as very critical was found in IBM DataPower Gateway up to 10.5.0.22/10.6.6/10.6.0.10/11.0.0.2. Affected by this vulnerability is an unknown function. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.

It is possible to read the advisory at ibm.com. This vulnerability is known as CVE-2026-16159 since 07/17/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 10/08/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• IBM

Name

• DataPower Gateway

Version

• 10.5.0.0
• 10.5.0.1
• 10.5.0.2
• 10.5.0.3
• 10.5.0.4
• 10.5.0.5
• 10.5.0.6
• 10.5.0.7
• 10.5.0.8
• 10.5.0.9
• 10.5.0.10
• 10.5.0.11
• 10.5.0.12
• 10.5.0.13
• 10.5.0.14
• 10.5.0.15
• 10.5.0.16
• 10.5.0.17
• 10.5.0.18
• 10.5.0.19
• 10.5.0.20
• 10.5.0.21
• 10.5.0.22
• 10.6.0
• 10.6.0.0
• 10.6.0.1
• 10.6.0.2
• 10.6.0.3
• 10.6.0.4
• 10.6.0.5
• 10.6.0.6
• 10.6.0.7
• 10.6.0.8
• 10.6.0.9
• 10.6.0.10
• 10.6.1
• 10.6.2
• 10.6.3
• 10.6.4
• 10.6.5
• 10.6.6
• 11.0.0.0
• 11.0.0.1
• 11.0.0.2

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion