{"vulnerability": "cve-2026-16340", "sightings": [{"uuid": "c5cb0ed5-f9a0-46c1-9855-b38b4526b740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16340", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117405529670434514", "content": "CVE-2026-16340 (CRITICAL, CVSS 9.8): IBM DataPower Gateway 10.5.0.0 \u2013 10.5.0.22, 10.6.0.0 \u2013 10.6.0.10, 10.6.1 \u2013 10.6.6, 11.0.0.0 \u2013 11.0.0.2 vulnerable to remote code execution via out-of-bounds write. Patch priority high. https://radar.offseq.com/threat/cve-2026-16340-cwe-787-out-of-bounds-write-in-ibm-datapower-gateway-106cd-0c7cd2fb359c85f5 #OffSeq #IBM #Vuln #Cybersecurity", "creation_timestamp": "2026-10-08T13:30:12.725406Z"}, {"uuid": "10990420-9adc-4434-bb9e-27a4957fa029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16340", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxekxokes52j", "content": "CRITICAL: IBM DataPower Gateway 10.5.0.0 \u2013 10.6.6 & 11.0.0.0 \u2013 11.0.0.2 impacted by CVE-2026-16340. Remote code execution risk via out-of-bounds write. Assess & patch when available. https://radar.offseq.com/threat/cve-2026-16340-cwe-787-out-of-bounds-write-in-ibm-datapower-gateway-106cd-0c7cd2fb...", "creation_timestamp": "2026-10-08T13:30:15.190872Z"}, {"uuid": "8c109db2-edbb-40e9-b095-116b238638cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16340", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxelz3dolh2c", "content": "IBM DataPower Gateway faces CVE-2026-16340 scoring 9.8.\n\u2022 Remote code execution possible\n\u2022 Out-of-bounds write tied to RFC2047 parser\n\u2022 Hits listed releases across 10.5 to 11.0 lines\n\nhttps://thecircuitry.to/article/cve-2026-16340-rated-critical-in-ibm-datapower-gateway-muzl7549", "creation_timestamp": "2026-10-08T13:48:55.691786Z"}, {"uuid": "e10c26dd-8571-4795-ae96-24673a0406b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16340", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxen2cmslh2w", "content": "\ud83d\udea8 CVE-2026-16340 \u2014 CVSS 9.8 CRITICAL\n\nIBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, 11.0.0...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-16340\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T14:07:29.947413Z"}, {"uuid": "8181ffd4-85ab-4ae9-8578-34dc9d61787c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16340", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxep2afy352f", "content": "IBM fixes 23 IBM DataPower Gateway vulnerabilities, including critical RCE flaws CVE-2026-15762 and CVE-2026-16340. Upgrade to 11.0.0.3 now.\n\n#IBM #DataPower #APIGateway #CVE202615762 #CVE202616340 #CVE202614990 #RCE #Vulnerability", "creation_timestamp": "2026-10-08T14:43:15.777753Z"}, {"uuid": "ac75b922-ade2-488e-bc78-b4cf7a09baad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16340", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxesrq6ci22x", "content": "CVE-2026-16340 - datapower gateway 10.6cd\nCertain versions of IBM DataPower Gateway may let a remote attacker run their own software by sending specially crafted messages. This happens because the system mishandles\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-10-08T15:50:07.644766Z"}]}