Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*

part: a version: 9.3.5.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11375 vulnerable 2026-10-13 12:28:35.164119 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
Published: 2026-09-18T16:09:00.823Z
Updated: 2026-09-21T12:47:23.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11378 vulnerable 2026-10-13 12:28:34.947751 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
Published: 2026-09-18T16:09:21.328Z
Updated: 2026-09-21T12:47:22.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11729 vulnerable 2026-10-13 12:28:34.415182 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (8.5)
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe deserialization that enables JNDI injection attacks.
Published: 2026-09-15T17:31:01.721Z
Updated: 2026-09-16T03:56:51.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11725 vulnerable 2026-10-13 12:28:34.229936 IBM MQ queue manager is vulnerable to privilege escalation
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.
Published: 2026-09-18T19:15:11.436Z
Updated: 2026-09-22T03:55:56.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10751 vulnerable 2026-10-13 12:28:32.777283 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (7.5)
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
Published: 2026-09-18T15:56:58.184Z
Updated: 2026-09-21T12:47:23.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10030 vulnerable 2026-10-13 12:28:32.761013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10575 vulnerable 2026-10-13 12:28:32.271369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10027 vulnerable 2026-10-13 12:28:32.239362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10853 vulnerable 2026-10-13 12:28:31.943109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12728 vulnerable 2026-09-16 04:32:51.623904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12354 vulnerable 2026-09-16 04:32:51.310991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12150 vulnerable 2026-09-16 04:32:51.043024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12666 vulnerable 2026-09-16 04:32:51.034810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12667 vulnerable 2026-09-16 04:32:50.928969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12355 vulnerable 2026-09-16 04:32:50.858656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12351 vulnerable 2026-09-16 04:32:50.734755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13287 vulnerable 2026-09-16 04:32:50.404064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13293 vulnerable 2026-09-16 04:32:50.366414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13265 vulnerable 2026-09-16 04:32:50.103657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13275 vulnerable 2026-09-16 04:32:50.025431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13285 vulnerable 2026-09-16 04:32:49.930050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11728 vulnerable 2026-09-16 04:32:45.660280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1713 vulnerable 2026-06-08 07:49:09.449512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.