medium6.5
CVE-2026-13257
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated…
Impact
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Datapower Gateway | from 10.5.0.0 before 10.5.0.23 from 10.6.0.0 before 10.6.0.11 from 10.6.1.0 before 11.0.0.3 from 11.0.0.0 before 11.0.0.3 |