IBM security advisory (AV26-1022)

Serial number: AV26-1022Date: October 8, 2026 As of October 8, 2026, IBM is affected by vulnerabilities in the following products: IBM DataPower Gateway 10.5.0 Prior to or equal to 10.5.0.22 IBM DataPower Gateway 10.6.0 Prior to or equal to 10.6.0.10 IBM DataPower Gateway 10.6CD Prior to or equal to 10.6.6 IBM DataPower Gateway 11.0.0 Prior to or equal to 11.0.0.2 Langflow OSS Version 1.0.0 to 1.12.2 The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. Security Bulletin: IBM DataPower Gateway affected by cross-site scripting (CVE-2026-14990) Security Bulletin: IBM DataPower Gateway affected by multiple CVEs Security Bulletin: Langflow OSS is affected by multiple vulnerabilities IBM Product Security Incident Response