Denial of Service Vulnerability in IBM MQ
CVE-2026-10853

7.5HIGH

Key Information:

Vendor

IBM
Status
MQ
Vendor
CVE Published:
18 September 2026

What is CVE-2026-10853?

IBM MQ has a vulnerability that allows an authenticated attacker with cluster access to manipulate the processing of cluster command messages. Due to inadequate validation of command message lengths, this flaw could be exploited to cause a denial of service or even execute arbitrary code. It’s crucial for users of IBM MQ to apply the latest patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

MQ 9.1.0.0 <= 9.1.0.37 LTS

MQ 9.2.0.0 <= 9.2.0.43 LTS

MQ 9.3.0.0 <= 9.3.0.41 LTS

References

https://www.ibm.com/support/pages/node/7284905
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.