Denial of Service Vulnerability in IBM MQ

CVE-2026-11828

What is CVE-2026-11828?

IBM MQ is vulnerable to a denial of service attack that could be initiated by a remote attacker who has access to queue manager controls or who can exploit man-in-the-middle positions on unencrypted channels. The issue arises from improper validation of queue name length values, which enables attackers to disrupt client applications' usage of asynchronous message consumption, potentially leading to service outages or degraded performance.

References