CVE-2026-16340 | IBM DataPower Gateway up to 10.5.0.22/10.6.0.10/10.6.6/11.0.0.2 RFC2047 encoded-word parser out-of-bounds write

A vulnerability marked as very critical has been reported in IBM DataPower Gateway up to 10.5.0.22/10.6.0.10/10.6.6/11.0.0.2. The affected element is the function RFC2047 encoded-word parser. Performing a manipulation results in out-of-bounds write.

This vulnerability is reported as CVE-2026-16340. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More