Skip to content
7.5 High

CVE-2026-10853 IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute…

Description

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.

Affected products and versions

Product Affected versions Fixed in
MQ 10.0.0.0 No fix stated
MQ 9.4 9.4.0.0 → latest No fix stated
MQ 9.3 9.3.0.0 → latest No fix stated
MQ 9.2 9.2.0.0 → latest No fix stated
MQ 9.1 9.1.0.0 → latest No fix stated
The 117 CVEs of MQ →
Track this CVE