Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*

part: a version: 9.3.0.41 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11375 vulnerable 2026-10-13 12:28:35.163554 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
Published: 2026-09-18T16:09:00.823Z
Updated: 2026-09-21T12:47:23.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11378 vulnerable 2026-10-13 12:28:34.946910 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
Published: 2026-09-18T16:09:21.328Z
Updated: 2026-09-21T12:47:22.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11729 vulnerable 2026-10-13 12:28:34.414387 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (8.5)
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe deserialization that enables JNDI injection attacks.
Published: 2026-09-15T17:31:01.721Z
Updated: 2026-09-16T03:56:51.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11725 vulnerable 2026-10-13 12:28:34.229035 IBM MQ queue manager is vulnerable to privilege escalation
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.
Published: 2026-09-18T19:15:11.436Z
Updated: 2026-09-22T03:55:56.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10751 vulnerable 2026-10-13 12:28:32.776708 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (7.5)
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
Published: 2026-09-18T15:56:58.184Z
Updated: 2026-09-21T12:47:23.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10030 vulnerable 2026-10-13 12:28:32.760035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10575 vulnerable 2026-10-13 12:28:32.270835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10027 vulnerable 2026-10-13 12:28:32.238812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10853 vulnerable 2026-10-13 12:28:31.942229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12728 vulnerable 2026-09-16 04:32:51.622896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12354 vulnerable 2026-09-16 04:32:51.310314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12150 vulnerable 2026-09-16 04:32:51.042483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12666 vulnerable 2026-09-16 04:32:51.034256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12667 vulnerable 2026-09-16 04:32:50.928445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12355 vulnerable 2026-09-16 04:32:50.857858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12351 vulnerable 2026-09-16 04:32:50.734172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13287 vulnerable 2026-09-16 04:32:50.403540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13293 vulnerable 2026-09-16 04:32:50.365890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13265 vulnerable 2026-09-16 04:32:50.102886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13275 vulnerable 2026-09-16 04:32:50.024876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13285 vulnerable 2026-09-16 04:32:49.929290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11728 vulnerable 2026-09-16 04:32:45.659490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.