← CVE Intelligence

CVE-2026-10853

IBM MQ queue manager is vulnerable to remote code execution PUBLISHED

Description (CNA)

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.

Affected (CNA)

Vendor / productVersions
IBM / MQaffected 9.1.0.0 through 9.1.0.37 LTS; affected 9.2.0.0 through 9.2.0.43 LTS; affected 9.3.0.0 through 9.3.0.41 LTS; affected 9.3.0.0 through 9.3.5.1 CD; affected 9.4.0.0 through 9.4.0.25 LTS; affected 9.4.0.0 through 9.4.5.1 CD; affected 10.0.0.0

CWE

CWE-470

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.