CVE-2026-12733

HIGH 7.5CVE-2026-12733 · Published 30/07/2026 · updated 10/08/2026

In short

CVE-2026-12733 is a HIGH (CVSS 7.5) vulnerability affecting datapower gateway (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 45.9% of all vulnerabilities.
Fix: update to 10.5.0.22, 10.6.0.10, 11.0.0.2 or later.

Package	Affected versions	Patched versions
datapower gateway ibm	`≥ 10.5.0.0, < 10.5.0.22≥ 10.6.0.0, < 10.6.0.10≥ 10.6.1, ≤ 10.6.6≥ 11.0.0.0, < 11.0.0.2`	`10.5.0.2210.6.0.1011.0.0.2`

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 10.5.0.0, < 10.5.0.22≥ 10.6.0.0, < 10.6.0.10≥ 10.6.1, ≤ 10.6.6≥ 11.0.0.0, < 11.0.0.2

10.5.0.2210.6.0.1011.0.0.2

More vulnerabilities in datapower gateway

See all →