Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*

part: a version: 9.1.0.37 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11375 vulnerable 2026-10-13 12:28:35.161390 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
Published: 2026-09-18T16:09:00.823Z
Updated: 2026-09-21T12:47:23.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11378 vulnerable 2026-10-13 12:28:34.943704 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
Published: 2026-09-18T16:09:21.328Z
Updated: 2026-09-21T12:47:22.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11729 vulnerable 2026-10-13 12:28:34.411133 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (8.5)
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe deserialization that enables JNDI injection attacks.
Published: 2026-09-15T17:31:01.721Z
Updated: 2026-09-16T03:56:51.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11725 vulnerable 2026-10-13 12:28:34.225868 IBM MQ queue manager is vulnerable to privilege escalation
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.
Published: 2026-09-18T19:15:11.436Z
Updated: 2026-09-22T03:55:56.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10751 vulnerable 2026-10-13 12:28:32.773937 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (7.5)
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
Published: 2026-09-18T15:56:58.184Z
Updated: 2026-09-21T12:47:23.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10575 vulnerable 2026-10-13 12:28:32.268568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10027 vulnerable 2026-10-13 12:28:32.236544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10853 vulnerable 2026-10-13 12:28:31.939011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12728 vulnerable 2026-09-16 04:32:51.618747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12354 vulnerable 2026-09-16 04:32:51.307432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12150 vulnerable 2026-09-16 04:32:51.040293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12666 vulnerable 2026-09-16 04:32:51.031864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12667 vulnerable 2026-09-16 04:32:50.926291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12355 vulnerable 2026-09-16 04:32:50.854742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13287 vulnerable 2026-09-16 04:32:50.401363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13293 vulnerable 2026-09-16 04:32:50.363703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13265 vulnerable 2026-09-16 04:32:50.099695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13275 vulnerable 2026-09-16 04:32:50.022695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13285 vulnerable 2026-09-16 04:32:49.926103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11728 vulnerable 2026-09-16 04:32:45.655436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.