Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*

part: a version: 9.3.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11375 vulnerable 2026-10-13 12:28:35.163036 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
Published: 2026-09-18T16:09:00.823Z
Updated: 2026-09-21T12:47:23.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11378 vulnerable 2026-10-13 12:28:34.946077 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
Published: 2026-09-18T16:09:21.328Z
Updated: 2026-09-21T12:47:22.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11729 vulnerable 2026-10-13 12:28:34.413580 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (8.5)
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe deserialization that enables JNDI injection attacks.
Published: 2026-09-15T17:31:01.721Z
Updated: 2026-09-16T03:56:51.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11725 vulnerable 2026-10-13 12:28:34.228264 IBM MQ queue manager is vulnerable to privilege escalation
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.
Published: 2026-09-18T19:15:11.436Z
Updated: 2026-09-22T03:55:56.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10751 vulnerable 2026-10-13 12:28:32.776141 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (7.5)
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
Published: 2026-09-18T15:56:58.184Z
Updated: 2026-09-21T12:47:23.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10030 vulnerable 2026-10-13 12:28:32.758951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10575 vulnerable 2026-10-13 12:28:32.270299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10027 vulnerable 2026-10-13 12:28:32.238243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10853 vulnerable 2026-10-13 12:28:31.941453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12728 vulnerable 2026-09-16 04:32:51.621917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12354 vulnerable 2026-09-16 04:32:51.309581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12150 vulnerable 2026-09-16 04:32:51.041950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12666 vulnerable 2026-09-16 04:32:51.033700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12667 vulnerable 2026-09-16 04:32:50.927913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12355 vulnerable 2026-09-16 04:32:50.857109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12351 vulnerable 2026-09-16 04:32:50.733555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13287 vulnerable 2026-09-16 04:32:50.402989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13293 vulnerable 2026-09-16 04:32:50.365343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13265 vulnerable 2026-09-16 04:32:50.102093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13275 vulnerable 2026-09-16 04:32:50.024333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13285 vulnerable 2026-09-16 04:32:49.928495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11728 vulnerable 2026-09-16 04:32:45.658301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1713 vulnerable 2026-06-08 07:49:09.446467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.