← Back

CVE-2026-10853

nvd nist
Published: Sep 18, 2026Modified: Sep 23, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.

Affected (7)

Products: Ibm: Mq
Ibm
1 product
Mq
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Mq
9.3.0.0 ≤ version ≤ 9.3.5.1
Mq
9.4.0.0 ≤ version ≤ 9.4.5.1
Mq
9.1.0.0 ≤ version ≤ 9.1.0.37
Mq
9.2.0.0 ≤ version ≤ 9.2.0.43
Mq
9.3.0.0 ≤ version ≤ 9.3.0.41
Mq
9.4.0.0 ≤ version ≤ 9.4.0.25
Mq
Version 10.0.0.0

Related CWEs

CWE-470
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.