Advisories · Technology

IBM MQ.

Every CVE that names IBM MQ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-10859 CVE record

CVSS 7.5 High

IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
- IBM MQ
Not analysed yet 4 Nov 2026
CVE-2026-11376 CVE record

CVSS 8.8 High

IBM MQ is affected by a denial of service vulnerability
- IBM MQ
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-11724 CVE record

CVSS 8.5 High

IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
- IBM MQ
- CWE-20
Not analysed yet 4 Nov 2026
CVE-2026-12356 CVE record

CVSS 7.5 High

IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
- IBM MQ
- Other injection
Not analysed yet 4 Nov 2026
CVE-2026-12550 CVE record

CVSS 5.4 Medium

IBM MQ is affected by a denial of service vulnerability
- IBM MQ
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-13271 CVE record

CVSS 8.1 High

IBM MQ Managed File Transfer is affected by a denial of service vulnerability
- IBM MQ
- XML external entities (XXE)
Not analysed yet 4 Nov 2026
CVE-2026-13284 CVE record

CVSS 7.1 High

IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 4 Nov 2026
CVE-2026-13289 CVE record

CVSS 7.1 High

IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 4 Nov 2026
CVE-2026-13292 CVE record

CVSS 8.8 High

IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
- IBM MQ
- CWE-15
Not analysed yet 4 Nov 2026
CVE-2026-14252 CVE record

CVSS 6.2 Medium

IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility
- IBM MQ
- Information disclosure
Not analysed yet 4 Nov 2026
CVE-2026-18142 CVE record

CVSS 7.1 High

IBM MQ is affected by a denial of service vulnerability
- IBM MQ
- Memory corruption
Not analysed yet 4 Nov 2026
CVE-2026-14511 CVE record

CVSS 6.5 Medium

IBM MQ Denial of Service
- IBM MQ
- Denial of service
Not analysed yet 19 Oct 2026
CVE-2026-11725 CVE record

CVSS 8.8 High

IBM MQ queue manager is vulnerable to privilege escalation
- IBM MQ
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2026-11378 CVE record

CVSS 8.8 High

IBM MQ queue manager is vulnerable to remote code execution
- IBM MQ
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2026-11375 CVE record

CVSS 8.8 High

IBM MQ queue manager is vulnerable to remote code execution
- IBM MQ
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2026-10853 CVE record

CVSS 7.5 High

IBM MQ queue manager is vulnerable to remote code execution
- IBM MQ
- Code injection
Not analysed yet 18 Sept 2026
CVE-2026-10751 CVE record

CVSS 7.5 High

IBM MQ Java messaging is vulnerable to remote code execution
- IBM MQ
- Insecure deserialization
Not analysed yet 18 Sept 2026
CVE-2026-10575 CVE record

CVSS 8.8 High

IBM MQ queue manager is vulnerable to remote code execution
- IBM MQ
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2026-10030 CVE record

CVSS 7.1 High

IBM MQ Console is vulnerable to privilege escalation
- IBM MQ
- Broken access control
Not analysed yet 18 Sept 2026
CVE-2026-10027 CVE record

CVSS 8.1 High

IBM MQ queue manager is vulnerable to unauthenticated remote code execution
- IBM MQ
- Memory corruption
Not analysed yet 18 Sept 2026
CVE-2026-11728 CVE record

CVSS 8.1 High

IBM MQ .NET client is vulnerable to remote code execution
- IBM MQ
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-11729 CVE record

CVSS 8.5 High

IBM MQ Java messaging is vulnerable to remote code execution
- IBM MQ
- Insecure deserialization
Not analysed yet 15 Sept 2026
CVE-2026-12150 CVE record

CVSS 7.0 High

IBM MQ queue manager is vulnerable to denial of service
- IBM MQ
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-12351 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection
- IBM MQ
- Other injection
Not analysed yet 15 Sept 2026
CVE-2026-12354 CVE record

CVSS 7.5 High

IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection
- IBM MQ
- CWE-913
Not analysed yet 15 Sept 2026
CVE-2026-12355 CVE record

CVSS 8.1 High

IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution
- IBM MQ
- Other injection
Not analysed yet 15 Sept 2026
CVE-2026-12666 CVE record

CVSS 8.1 High

IBM MQ Java messaging is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 15 Sept 2026
CVE-2026-12667 CVE record

CVSS 7.1 High

IBM MQ .NET client is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 15 Sept 2026
CVE-2026-12728 CVE record

CVSS 8.8 High

IBM MQ Java messaging is vulnerable to remote code execution
- IBM MQ
- Insecure deserialization
Not analysed yet 15 Sept 2026
CVE-2026-13265 CVE record

CVSS 6.8 Medium

IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 14 Sept 2026
CVE-2026-13275 CVE record

CVSS 7.1 High

IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 14 Sept 2026
CVE-2026-13285 CVE record

CVSS 7.1 High

IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 14 Sept 2026
CVE-2026-13293 CVE record

CVSS 8.8 High

IBM MQ Java messaging is vulnerable to remote code execution
- IBM MQ
- Insecure deserialization
Not analysed yet 14 Sept 2026
CVE-2026-13287 CVE record

CVSS 7.1 High

IBM MQ Managed File Transfer is vulnerable to XML external entity injection
- IBM MQ
- XML external entities (XXE)
Not analysed yet 14 Sept 2026
CVE-2026-1713 CVE record

CVSS 5.5 Medium

IBM MQ is affected by an authority vulnerablility
- IBM MQ
- CWE-305
Not analysed yet 3 Mar 2026
CVE-2025-36128 CVE record

CVSS 7.5 High

IBM MQ denial of service
- IBM MQ
- Denial of service
Not analysed yet 16 Oct 2025
CVE-2025-36100 CVE record

CVSS 5.1 Medium

IBM MQ information disclosure
- IBM MQ
- CWE-260
Not analysed yet 7 Sept 2025
CVE-2025-3631 CVE record

CVSS 6.5 Medium

IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- Memory corruption
Not analysed yet 11 Jul 2025
CVE-2025-0985 CVE record

CVSS 5.5 Medium

IBM MQ information disclosure
- IBM MQ
- CWE-526
Not analysed yet 28 Feb 2025
CVE-2024-54175 CVE record

CVSS 5.5 Medium

IBM MQ denial of service
- IBM MQ
- CWE-754
Not analysed yet 28 Feb 2025
CVE-2025-23225 CVE record

CVSS 6.5 Medium

IBM MQ denial of service
- IBM MQ
- CWE-230
Not analysed yet 28 Feb 2025
CVE-2024-54173 CVE record

CVSS 4.7 Medium

IBM MQ information disclosure
- IBM MQ
- CWE-1323
Not analysed yet 28 Feb 2025
CVE-2025-0975 CVE record

CVSS 8.8 High

IBM MQ code execution
- IBM MQ
- CWE-150
Not analysed yet 28 Feb 2025
CVE-2024-52898 CVE record

CVSS 6.2 Medium

IBM MQ information disclosure
- IBM MQ
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2024-52897 CVE record

CVSS 6.2 Medium

IBM MQ information disclosure
- IBM MQ
- Information disclosure
Not analysed yet 19 Dec 2024
CVE-2024-52896 CVE record

CVSS 6.2 Medium

IBM MQ information disclosure
- IBM MQ
- Information disclosure
Not analysed yet 19 Dec 2024
CVE-2024-51470 CVE record

CVSS 6.5 Medium

IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- CWE-754
Not analysed yet 18 Dec 2024
CVE-2024-40681 CVE record

CVSS 7.5 High

IBM MQ security bypass
- IBM MQ
- Privilege escalation
Not analysed yet 7 Sept 2024
CVE-2024-40680 CVE record

CVSS 5.5 Medium

IBM MQ denial of service
- IBM MQ
- Denial of service
Not analysed yet 7 Sept 2024
CVE-2024-35116 CVE record

CVSS 5.9 Medium

IBM MQ denial of service
- IBM MQ
- Denial of service
Not analysed yet 28 Jun 2024
CVE-2024-35156 CVE record

CVSS 6.5 Medium

IBM MQ information disclosure
- IBM MQ
- Information disclosure
Not analysed yet 28 Jun 2024
CVE-2024-35155 CVE record

CVSS 6.5 Medium

IBM MQ information disclosure
- IBM MQ
- Information disclosure
Not analysed yet 28 Jun 2024
CVE-2024-31912 CVE record

CVSS 7.5 High

IBM MQ privilege escalation
- IBM MQ
- Privilege escalation
Not analysed yet 28 Jun 2024
CVE-2024-31919 CVE record

CVSS 5.9 Medium

IBM MQ denial of service
- IBM MQ
- Denial of service
Not analysed yet 28 Jun 2024
CVE-2024-25015 CVE record

CVSS 7.5 High

IBM MQ denial of service
- IBM MQ
- CWE-406
Not analysed yet 1 May 2024
CVE-2023-45177 CVE record

CVSS 5.3 Medium

IBM MQ denial of service
- IBM MQ
- CWE-20
Not analysed yet 20 Mar 2024
CVE-2024-25016 CVE record

CVSS 7.5 High

IBM MQ denial of service
- IBM MQ
- CWE-20
Not analysed yet 3 Mar 2024
CVE-2023-28513 CVE record

CVSS 5.9 Medium

IBM MQ denial of service
- IBM MQ
- IBM MQ Appliance
- CWE-20
Not analysed yet 19 Jul 2023
CVE-2023-28950 CVE record

CVSS 5.1 Medium

IBM MQ information disclosure
- IBM MQ
Not analysed yet 19 May 2023
CVE-2023-28514 CVE record

CVSS 6.2 Medium

IBM MQ information disclosure
- IBM MQ
- Information disclosure
Not analysed yet 19 May 2023