Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*

part: a version: 10.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq (00878131-6c19-566d-8f48-7c2806539301)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11375 vulnerable 2026-10-13 12:28:35.166274 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
Published: 2026-09-18T16:09:00.823Z
Updated: 2026-09-21T12:47:23.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11378 vulnerable 2026-10-13 12:28:34.950897 IBM MQ queue manager is vulnerable to remote code execution
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing.
Published: 2026-09-18T16:09:21.328Z
Updated: 2026-09-21T12:47:22.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11729 vulnerable 2026-10-13 12:28:34.418324 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (8.5)
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe deserialization that enables JNDI injection attacks.
Published: 2026-09-15T17:31:01.721Z
Updated: 2026-09-16T03:56:51.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11725 vulnerable 2026-10-13 12:28:34.233092 IBM MQ queue manager is vulnerable to privilege escalation
HIGH (8.8)
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.
Published: 2026-09-18T19:15:11.436Z
Updated: 2026-09-22T03:55:56.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10751 vulnerable 2026-10-13 12:28:32.779500 IBM MQ Java messaging is vulnerable to remote code execution
HIGH (7.5)
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling.
Published: 2026-09-18T15:56:58.184Z
Updated: 2026-09-21T12:47:23.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10030 vulnerable 2026-10-13 12:28:32.764122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10575 vulnerable 2026-10-13 12:28:32.273611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10027 vulnerable 2026-10-13 12:28:32.242012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10853 vulnerable 2026-10-13 12:28:31.946329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12728 vulnerable 2026-09-16 04:32:51.627891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12354 vulnerable 2026-09-16 04:32:51.313701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12150 vulnerable 2026-09-16 04:32:51.045176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12666 vulnerable 2026-09-16 04:32:51.037025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12667 vulnerable 2026-09-16 04:32:50.931118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12355 vulnerable 2026-09-16 04:32:50.861768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12351 vulnerable 2026-09-16 04:32:50.736915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13287 vulnerable 2026-09-16 04:32:50.406203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13293 vulnerable 2026-09-16 04:32:50.368507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13265 vulnerable 2026-09-16 04:32:50.106787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13275 vulnerable 2026-09-16 04:32:50.027577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13285 vulnerable 2026-09-16 04:32:49.933132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11728 vulnerable 2026-09-16 04:32:45.664782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.