https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T17:47:42.044998+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-14905 fkie_cve-2026-14905 2026-10-09T17:47:42.196813+00:00

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

 https://vulnerability.circl.lu/vuln/ghsa-3jq7-c3hf-9982 GHSA-3jq7-c3hf-9982 2026-10-09T17:47:42.196928+00:00

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-3623 WID-SEC-W-2026-3623 — IBM DataPower Gateway: Mehrere Schwachstellen 2026-10-09T17:47:42.196967+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM DataPower Gateway ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder Cross-Site-Scripting-Angriffe durchzuführen.