Denial of Service Vulnerability in IBM MQ for HPE NonStop
CVE-2026-11727

8.1HIGH

Key Information:

Vendor

IBM
Status
MQ For HP Nonstop
Vendor
CVE Published:
18 September 2026

What is CVE-2026-11727?

A vulnerability exists in IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40, allowing remote attackers to exploit improper validation of queue manager responses. This can lead to a denial of service or the potential execution of arbitrary code, posing significant risks to system integrity and availability. It is crucial for users to apply the necessary security patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

MQ for HPE NonStop 8.1.0 <= 8.1.0.40

References

https://www.ibm.com/support/pages/node/7287708
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.