Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294663

IBM MQ is affected by a denial of service vulnerability

Risk 48
Severity
7.1
Integer Overflow
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-18142

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294502

IBM MQ is affected by a denial of service vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message selection parameters.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-12550

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294498

IBM MQ is affected by a denial of service vulnerability

Risk 79
Severity
8.8
Integer Overflow
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests with crafted buffer size values.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-11376

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294664

IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability

Risk 70
Severity
7.5
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code on consumer applications due to insecure deserialization of ObjectMessage payloads.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-10859

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294642

IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

Risk 70
Severity
7.5
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant script commands.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-12356

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294503

IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

Risk 73
Severity
8.5
Input Validation
AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code on a Managed File Transfer agent host due to improper validation of metadata used during script execution.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-11724

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294654

IBM MQ Managed File Transfer is affected by a denial of service vulnerability

Risk 60
Severity
8.1
XEE
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper restriction of XML external entity references in command queue processing.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-13271

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294499

IBM MQ Managed File Transfer is vulnerable to XML external entity injection

Risk 48
Severity
7.1
XEE
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-13289

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294493

IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility

Risk 36
Severity
6.2
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentially sensitive information in log files that could be read by a local user.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-14252

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294641

IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer request metadata.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-13292

IBM MQ1 vulnerability

First published (updated )
Advisory
IBM-7294500

IBM MQ Managed File Transfer is vulnerable to XML external entity injection

Risk 48
Severity
7.1
XEE
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-13284

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203