IBM MQ Vulnerability in Multiple Versions from IBM
CVE-2026-1713

5.5MEDIUM

Key Information:

Vendor

IBM
Status
MQ
Vendor
CVE Published:
3 March 2026

What is CVE-2026-1713?

IBM MQ has a security flaw present in multiple versions that can potentially allow information disclosure. This issue impacts various editions, including LTS (Long Term Support) and CD (Continuous Delivery) versions, necessitating prompt attention to mitigate risks. Users are advised to review the vendor's advisory and apply necessary patches to safeguard their systems.

Affected Version(s)

MQ 9.1.0.0 <= 9.1.0.33 LTS

MQ 9.2.0.0 <= 9.2.0.40 LTS

MQ 9.3.0.0 <= 9.3.0.36 LTS

References

https://www.ibm.com/support/pages/node/7261944
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.