CVE-2026-16169
Received Received - Intake

IBM DataPower Gateway Denial of Service Vulnerability

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description
IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-16169
EUVD
EUVD-2026-94893

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
IBM DataPower Gateway 11.0.0 11.0.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 allows a remote attacker to cause a denial of service by consuming excessive system resources without proper control. It is classified under CWE-400 (Uncontrolled Resource Consumption).

Detection Guidance

To detect this vulnerability, check the version of IBM DataPower Gateway running on your system. If it is between 11.0.0.0 and 11.0.0.2, it is vulnerable. Use commands like 'show version' or 'system version' in the DataPower CLI to verify the version.

Impact Analysis

The vulnerability can lead to system unavailability as it causes denial of service by exhausting system resources. This may disrupt services relying on IBM DataPower Gateway, affecting business operations and user access.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by disrupting the availability of IBM DataPower Gateway, which may be used to process or transmit sensitive data. Uncontrolled resource consumption leading to denial of service could result in unauthorized access or loss of data integrity, violating GDPR's availability principle and HIPAA's security requirements for safeguarding protected health information.

Mitigation Strategies

Upgrade IBM DataPower Gateway to version 11.0.0.3 immediately. This version contains the fix for CVE-2026-16169. No workarounds are available, so applying the official patch is the only mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16169. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart