IBM security advisory (AV26-1022)

Serial number: AV26-1022
Date: October 8, 2026

As of October 8, 2026, IBM is affected by vulnerabilities in the following products:

• IBM DataPower Gateway 10.5.0
  • Prior to or equal to 10.5.0.22
• IBM DataPower Gateway 10.6.0
  • Prior to or equal to 10.6.0.10
• IBM DataPower Gateway 10.6CD
  • Prior to or equal to 10.6.6
• IBM DataPower Gateway 11.0.0
  • Prior to or equal to 11.0.0.2
• Langflow OSS
  • Version 1.0.0 to 1.12.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Bulletin: IBM DataPower Gateway affected by cross-site scripting (CVE-2026-14990)
• Security Bulletin: IBM DataPower Gateway affected by multiple CVEs
• Security Bulletin: Langflow OSS is affected by multiple vulnerabilities
• IBM Product Security Incident Response