CVE-2026-13257

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-10-08

Last modified

2026-10-14

Weaknesses

CWE-345

Affected products

• Datapower Gateway (Ibm)
• Datapower Gateway 1050 (Ibm)
• Datapower Gateway 1060 (Ibm)
• Datapower Gateway 106cd (Ibm)
• Datapower Gateway 1100 (Ibm)

References

• https://www.ibm.com/support/pages/node/7289775