Heap Buffer Underflow in IBM MQ for HPE NonStop
CVE-2026-10858

9.9CRITICAL

Key Information:

Vendor

IBM
Status
MQ For HP Nonstop
Vendor
CVE Published:
18 September 2026

What is CVE-2026-10858?

IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 is susceptible to a heap buffer underflow issue when handling multi-segment messages. This vulnerability allows an authenticated attacker to exploit the system, potentially leading to a denial of service or the execution of arbitrary code. It is essential for users to apply the appropriate patches to mitigate this risk.

Affected Version(s)

MQ for HPE NonStop 8.1.0 <= 8.1.0.40

References

https://www.ibm.com/support/pages/node/7287704
vendor-advisorypatch

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.