CVE-2026-12733 IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations

Description

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations.

Affected products and versions

Product	Affected versions	Fixed in
DataPower Gateway 10.6CD 10.6	10.6.1 → 10.6.6	No fix stated
DataPower Gateway 10.6.0 10.6	10.6.0.0 → 10.6.0.9	No fix stated
DataPower Gateway 11.0.0 11.0	11.0.0.0 → 11.0.0.1	No fix stated
DataPower Gateway 10.5.0 10.5	10.5.0.0 → 10.5.0.21	No fix stated

Other CVEs of DataPower Gateway 10.6CD

The 41 CVEs of DataPower Gateway 10.6CD →

CVE-2026-14269 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 9.8 Critical CVE-2026-13257 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 6.5 Medium CVE-2026-13258 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 5.4 Medium CVE-2026-14273 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0… 6.5 Medium