7.5
High
CVE-2024-40681 IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically…
Description
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ | Versions not published |
Other CVEs of MQ
The 117 CVEs of MQ →
CVE-2026-10859
IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
7.5
High
CVE-2026-11376
IBM MQ is affected by a denial of service vulnerability
8.8
High
CVE-2026-11724
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
8.5
High
CVE-2026-12356
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
7.5
High