# IBM MQ. Every CVE that names IBM MQ among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability](https://agentprime.io/advisories/CVE-2026-10859.md) `CVE-2026-10859` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 4 Nov 2026 - [IBM MQ is affected by a denial of service vulnerability](https://agentprime.io/advisories/CVE-2026-11376.md) `CVE-2026-11376` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption - [IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability](https://agentprime.io/advisories/CVE-2026-11724.md) `CVE-2026-11724` · CVE record: IBM MQ · CVSS 8.5 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-20 - [IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability](https://agentprime.io/advisories/CVE-2026-12356.md) `CVE-2026-12356` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 4 Nov 2026 · Tags: Other injection - [IBM MQ is affected by a denial of service vulnerability](https://agentprime.io/advisories/CVE-2026-12550.md) `CVE-2026-12550` · CVE record: IBM MQ · CVSS 5.4 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption - [IBM MQ Managed File Transfer is affected by a denial of service vulnerability](https://agentprime.io/advisories/CVE-2026-13271.md) `CVE-2026-13271` · CVE record: IBM MQ · CVSS 8.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: XML external entities (XXE) - [IBM MQ Managed File Transfer is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-13284.md) `CVE-2026-13284` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: XML external entities (XXE) - [IBM MQ Managed File Transfer is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-13289.md) `CVE-2026-13289` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: XML external entities (XXE) - [IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability](https://agentprime.io/advisories/CVE-2026-13292.md) `CVE-2026-13292` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-15 - [IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility](https://agentprime.io/advisories/CVE-2026-14252.md) `CVE-2026-14252` · CVE record: IBM MQ · CVSS 6.2 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Information disclosure - [IBM MQ is affected by a denial of service vulnerability](https://agentprime.io/advisories/CVE-2026-18142.md) `CVE-2026-18142` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: Memory corruption - [IBM MQ Denial of Service](https://agentprime.io/advisories/CVE-2026-14511.md) `CVE-2026-14511` · CVE record: IBM MQ · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Denial of service - [IBM MQ queue manager is vulnerable to privilege escalation](https://agentprime.io/advisories/CVE-2026-11725.md) `CVE-2026-11725` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [IBM MQ queue manager is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-11378.md) `CVE-2026-11378` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [IBM MQ queue manager is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-11375.md) `CVE-2026-11375` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [IBM MQ queue manager is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-10853.md) `CVE-2026-10853` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Code injection - [IBM MQ Java messaging is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-10751.md) `CVE-2026-10751` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Insecure deserialization - [IBM MQ queue manager is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-10575.md) `CVE-2026-10575` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [IBM MQ Console is vulnerable to privilege escalation](https://agentprime.io/advisories/CVE-2026-10030.md) `CVE-2026-10030` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Broken access control - [IBM MQ queue manager is vulnerable to unauthenticated remote code execution](https://agentprime.io/advisories/CVE-2026-10027.md) `CVE-2026-10027` · CVE record: IBM MQ · CVSS 8.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption - [IBM MQ .NET client is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-11728.md) `CVE-2026-11728` · CVE record: IBM MQ · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [IBM MQ Java messaging is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-11729.md) `CVE-2026-11729` · CVE record: IBM MQ · CVSS 8.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Insecure deserialization - [IBM MQ queue manager is vulnerable to denial of service](https://agentprime.io/advisories/CVE-2026-12150.md) `CVE-2026-12150` · CVE record: IBM MQ · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption - [IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection](https://agentprime.io/advisories/CVE-2026-12351.md) `CVE-2026-12351` · CVE record: IBM MQ · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Other injection - [IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection](https://agentprime.io/advisories/CVE-2026-12354.md) `CVE-2026-12354` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-913 - [IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution](https://agentprime.io/advisories/CVE-2026-12355.md) `CVE-2026-12355` · CVE record: IBM MQ · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: Other injection - [IBM MQ Java messaging is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-12666.md) `CVE-2026-12666` · CVE record: IBM MQ · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: XML external entities (XXE) - [IBM MQ .NET client is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-12667.md) `CVE-2026-12667` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: XML external entities (XXE) - [IBM MQ Java messaging is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-12728.md) `CVE-2026-12728` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Insecure deserialization - [IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-13265.md) `CVE-2026-13265` · CVE record: IBM MQ · CVSS 6.8 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: XML external entities (XXE) - [IBM MQ Managed File Transfer is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-13275.md) `CVE-2026-13275` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: XML external entities (XXE) - [IBM MQ Managed File Transfer is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-13285.md) `CVE-2026-13285` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: XML external entities (XXE) - [IBM MQ Java messaging is vulnerable to remote code execution](https://agentprime.io/advisories/CVE-2026-13293.md) `CVE-2026-13293` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Insecure deserialization - [IBM MQ Managed File Transfer is vulnerable to XML external entity injection](https://agentprime.io/advisories/CVE-2026-13287.md) `CVE-2026-13287` · CVE record: IBM MQ · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: XML external entities (XXE) - [IBM MQ is affected by an authority vulnerablility](https://agentprime.io/advisories/CVE-2026-1713.md) `CVE-2026-1713` · CVE record: IBM MQ · CVSS 5.5 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-305 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2025-36128.md) `CVE-2025-36128` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2025 · Tags: Denial of service - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2025-36100.md) `CVE-2025-36100` · CVE record: IBM MQ · CVSS 5.1 Medium · Not analysed yet · Published 7 Sept 2025 · Tags: CWE-260 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2025-3631.md) `CVE-2025-3631` · CVE record: IBM MQ and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2025-0985.md) `CVE-2025-0985` · CVE record: IBM MQ · CVSS 5.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-526 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-54175.md) `CVE-2024-54175` · CVE record: IBM MQ · CVSS 5.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-754 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2025-23225.md) `CVE-2025-23225` · CVE record: IBM MQ · CVSS 6.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-230 - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2024-54173.md) `CVE-2024-54173` · CVE record: IBM MQ · CVSS 4.7 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-1323 - [IBM MQ code execution](https://agentprime.io/advisories/CVE-2025-0975.md) `CVE-2025-0975` · CVE record: IBM MQ · CVSS 8.8 High · Not analysed yet · Published 28 Feb 2025 · Tags: CWE-150 - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2024-52898.md) `CVE-2024-52898` · CVE record: IBM MQ · CVSS 6.2 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2024-52897.md) `CVE-2024-52897` · CVE record: IBM MQ · CVSS 6.2 Medium · Not analysed yet · Published 19 Dec 2024 · Tags: Information disclosure - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2024-52896.md) `CVE-2024-52896` · CVE record: IBM MQ · CVSS 6.2 Medium · Not analysed yet · Published 19 Dec 2024 · Tags: Information disclosure - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-51470.md) `CVE-2024-51470` · CVE record: IBM MQ and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: CWE-754 - [IBM MQ security bypass](https://agentprime.io/advisories/CVE-2024-40681.md) `CVE-2024-40681` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2024 · Tags: Privilege escalation - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-40680.md) `CVE-2024-40680` · CVE record: IBM MQ · CVSS 5.5 Medium · Not analysed yet · Published 7 Sept 2024 · Tags: Denial of service - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-35116.md) `CVE-2024-35116` · CVE record: IBM MQ · CVSS 5.9 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Denial of service - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2024-35156.md) `CVE-2024-35156` · CVE record: IBM MQ · CVSS 6.5 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Information disclosure - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2024-35155.md) `CVE-2024-35155` · CVE record: IBM MQ · CVSS 6.5 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Information disclosure - [IBM MQ privilege escalation](https://agentprime.io/advisories/CVE-2024-31912.md) `CVE-2024-31912` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 28 Jun 2024 · Tags: Privilege escalation - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-31919.md) `CVE-2024-31919` · CVE record: IBM MQ · CVSS 5.9 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Denial of service - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-25015.md) `CVE-2024-25015` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 1 May 2024 · Tags: CWE-406 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2023-45177.md) `CVE-2023-45177` · CVE record: IBM MQ · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2024 · Tags: CWE-20 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2024-25016.md) `CVE-2024-25016` · CVE record: IBM MQ · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2024 · Tags: CWE-20 - [IBM MQ denial of service](https://agentprime.io/advisories/CVE-2023-28513.md) `CVE-2023-28513` · CVE record: IBM MQ and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 19 Jul 2023 · Tags: CWE-20 - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2023-28950.md) `CVE-2023-28950` · CVE record: IBM MQ · CVSS 5.1 Medium · Not analysed yet · Published 19 May 2023 - [IBM MQ information disclosure](https://agentprime.io/advisories/CVE-2023-28514.md) `CVE-2023-28514` · CVE record: IBM MQ · CVSS 6.2 Medium · Not analysed yet · Published 19 May 2023 · Tags: Information disclosure Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .