https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T21:59:56.366536+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-14502 fkie_cve-2026-14502 2026-10-09T21:59:56.370216+00:00

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.

 https://vulnerability.circl.lu/vuln/ghsa-r865-p2h8-vpm8 GHSA-r865-p2h8-vpm8 2026-10-09T21:59:56.370323+00:00

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-3623 WID-SEC-W-2026-3623 — IBM DataPower Gateway: Mehrere Schwachstellen 2026-10-09T21:59:56.370359+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder Cross-Site-Scripting-Angriffe durchzuführen.