CVE-2026-10572
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)
Description
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.
Affected (109)
Products: Ibm: Mq Operator, Supplied Mq Advanced Container Images
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 2.0.0 ≤ version ≤ 2.0.29 | |
| Version 10.0.0.0 r1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.3.0.0 r1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.4.0.10 r1 |
References (1)
Timeline
No history available yet.