← CVE Intelligence

CVE-2026-10575

IBM MQ queue manager is vulnerable to remote code execution PUBLISHED

Description (CNA)

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.

Affected (CNA)

Vendor / productVersions
IBM / MQaffected 9.1.0.0 through 9.1.0.37 LTS; affected 9.2.0.0 through 9.2.0.43 LTS; affected 9.3.0.0 through 9.3.0.41 LTS; affected 9.3.0.0 through 9.3.5.1 CD; affected 9.4.0.0 through 9.4.0.25 LTS; affected 9.4.0.0 through 9.4.5.1 CD; affected 10.0.0.0

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.