IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to…

Timeline

Detection, updates, and resolution for this record.

1. Oct 8, 2026 · NIST NVD

   Detected

   IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

2. Oct 14, 2026 · NIST NVD

   Updated

   IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

Affected

• cpe ibm/datapower gatewayversion unspecified

Sources

• CVE.orgCVE-2026-13257

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-13257

  30-day exploitation probability 0.1%

  first.org
• NIST NVDCVE-2026-13257

  IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

  nvd.nist.gov

References

• Vendor Advisory · ibm.com