Skip to content

Known vulnerabilities in IBM MQ Operator

Is your version affected?

CVE Summary Score Published
CVE-2026-10572 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a… 8.8 High Oct 19, 2026
CVE-2026-10574 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a… 8.8 High Oct 19, 2026
CVE-2026-10743 IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation… 8.8 High Oct 19, 2026
CVE-2026-11828 IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to… 5.9 Medium Oct 19, 2026
CVE-2026-11829 IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in… 6.5 Medium Oct 19, 2026
CVE-2026-11831 IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information… 5.4 Medium Oct 19, 2026
CVE-2026-12148 IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code… 7.5 High Oct 19, 2026
CVE-2026-12155 IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast… 6.5 Medium Oct 19, 2026
CVE-2026-12343 IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message… 6.5 Medium Oct 19, 2026
CVE-2026-12350 IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous… 6.5 Medium Oct 19, 2026
CVE-2026-12660 IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to… 2.7 Low Oct 19, 2026
CVE-2026-12665 IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS… 8.1 High Oct 19, 2026
CVE-2026-12669 IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed… 3.1 Low Oct 19, 2026
CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow… 4.3 Medium Oct 19, 2026
CVE-2026-12670 IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that… 5.3 Medium Oct 19, 2026
CVE-2026-2607 IBM MQ Operator SC2: v3.2.0 through 3.2.23CD:  v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4,… 5.1 Medium May 27, 2026
CVE-2025-12755 IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images (across affected… 4.0 Medium Feb 17, 2026
CVE-2025-33013 IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1,… 6.2 Medium Jul 24, 2025
CVE-2025-36005 IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1,… 5.9 Medium Jul 24, 2025
CVE-2025-36041 IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1,… 4.7 Medium Jun 15, 2025
CVE-2025-1333 IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through… 6.0 Medium May 1, 2025
CVE-2025-27365 IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1,… 6.5 Medium May 1, 2025
CVE-2024-27256 IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0… 5.9 Medium Jan 27, 2025
CVE-2024-39742 IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain… 8.1 High Jul 8, 2024
CVE-2024-39743 IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service… 5.9 Medium Jul 8, 2024

Other IBM products