← CVE Intelligence

CVE-2026-10027

IBM MQ queue manager is vulnerable to unauthenticated remote code execution PUBLISHED

Description (CNA)

IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled.

Affected (CNA)

Vendor / productVersions
IBM / MQaffected 9.1.0.0 through 9.1.0.37 LTS; affected 9.2.0.0 through 9.2.0.43 LTS; affected 9.3.0.0 through 9.3.0.41 LTS; affected 9.3.0.0 through 9.3.5.1 CD; affected 9.4.0.0 through 9.4.0.25 LTS; affected 9.4.0.0 through 9.4.5.1 CD; affected 10.0.0.0

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.