Skip to content
8.8 High

CVE-2026-11375 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a…

Description

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.

Affected products and versions

Product Affected versions Fixed in
MQ 10.0.0.0 No fix stated
MQ 9.4 9.4.0.0 → latest No fix stated
MQ 9.3 9.3.0.0 → latest No fix stated
MQ 9.2 9.2.0.0 → latest No fix stated
MQ 9.1 9.1.0.0 → latest No fix stated
The 117 CVEs of MQ →
Track this CVE