What is GHSA-3558-f8gc-mcgw?

GHSA-3558-f8gc-mcgw is a security advisory published by GitHub Security Advisories with Medium severity. IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0...

Which CVE IDs does GHSA-3558-f8gc-mcgw cover?

GHSA-3558-f8gc-mcgw covers the following CVE IDs: CVE-2026-13257. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3558-f8gc-mcgw?

GHSA-3558-f8gc-mcgw has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-3558-f8gc-mcgwMediumCVSS 6.5

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-13257 →

📋 Description

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13257
https://www.ibm.com/support/pages/node/7289775
https://github.com/advisories/GHSA-3558-f8gc-mcgw