Vulnerability Details CVE-2026-10859
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code on consumer applications due to insecure deserialization of ObjectMessage payloads.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 29.6%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-10859
-
Ibm
»
Mq
»
Version: 10.0.0.0
cpe:2.3:a:ibm:mq:10.0.0.0
-
Ibm
»
Mq
»
Version: 10.0.0.5
cpe:2.3:a:ibm:mq:10.0.0.5
-
Ibm
»
Mq
»
Version: 9.2.0.0
-
Ibm
»
Mq
»
Version: 9.2.0.1
-
Ibm
»
Mq
»
Version: 9.2.0.10
cpe:2.3:a:ibm:mq:9.2.0.10
-
Ibm
»
Mq
»
Version: 9.2.0.11
cpe:2.3:a:ibm:mq:9.2.0.11
-
Ibm
»
Mq
»
Version: 9.2.0.15
cpe:2.3:a:ibm:mq:9.2.0.15
-
Ibm
»
Mq
»
Version: 9.2.0.16
cpe:2.3:a:ibm:mq:9.2.0.16
-
Ibm
»
Mq
»
Version: 9.2.0.2
-
Ibm
»
Mq
»
Version: 9.2.0.20
cpe:2.3:a:ibm:mq:9.2.0.20
-
Ibm
»
Mq
»
Version: 9.2.0.21
cpe:2.3:a:ibm:mq:9.2.0.21
-
Ibm
»
Mq
»
Version: 9.2.0.22
cpe:2.3:a:ibm:mq:9.2.0.22
-
Ibm
»
Mq
»
Version: 9.2.0.25
cpe:2.3:a:ibm:mq:9.2.0.25
-
Ibm
»
Mq
»
Version: 9.2.0.26
cpe:2.3:a:ibm:mq:9.2.0.26
-
Ibm
»
Mq
»
Version: 9.2.0.27
cpe:2.3:a:ibm:mq:9.2.0.27
-
Ibm
»
Mq
»
Version: 9.2.0.28
cpe:2.3:a:ibm:mq:9.2.0.28
-
Ibm
»
Mq
»
Version: 9.2.0.3
-
Ibm
»
Mq
»
Version: 9.2.0.30
cpe:2.3:a:ibm:mq:9.2.0.30
-
Ibm
»
Mq
»
Version: 9.2.0.31
cpe:2.3:a:ibm:mq:9.2.0.31
-
Ibm
»
Mq
»
Version: 9.2.0.35
cpe:2.3:a:ibm:mq:9.2.0.35
-
Ibm
»
Mq
»
Version: 9.2.0.36
cpe:2.3:a:ibm:mq:9.2.0.36
-
Ibm
»
Mq
»
Version: 9.2.0.37
cpe:2.3:a:ibm:mq:9.2.0.37
-
Ibm
»
Mq
»
Version: 9.2.0.4
-
Ibm
»
Mq
»
Version: 9.2.0.40
cpe:2.3:a:ibm:mq:9.2.0.40
-
Ibm
»
Mq
»
Version: 9.2.0.41
cpe:2.3:a:ibm:mq:9.2.0.41
-
Ibm
»
Mq
»
Version: 9.2.0.43
cpe:2.3:a:ibm:mq:9.2.0.43
-
Ibm
»
Mq
»
Version: 9.2.0.5
-
Ibm
»
Mq
»
Version: 9.2.0.6
-
Ibm
»
Mq
»
Version: 9.2.0.7
-
Ibm
»
Mq
»
Version: 9.2.0.8
-
Ibm
»
Mq
»
Version: 9.3.0.0
-
Ibm
»
Mq
»
Version: 9.3.0.1
-
Ibm
»
Mq
»
Version: 9.3.0.10
cpe:2.3:a:ibm:mq:9.3.0.10
-
Ibm
»
Mq
»
Version: 9.3.0.11
cpe:2.3:a:ibm:mq:9.3.0.11
-
Ibm
»
Mq
»
Version: 9.3.0.15
cpe:2.3:a:ibm:mq:9.3.0.15
-
Ibm
»
Mq
»
Version: 9.3.0.16
cpe:2.3:a:ibm:mq:9.3.0.16
-
Ibm
»
Mq
»
Version: 9.3.0.17
cpe:2.3:a:ibm:mq:9.3.0.17
-
Ibm
»
Mq
»
Version: 9.3.0.2
-
Ibm
»
Mq
»
Version: 9.3.0.20
cpe:2.3:a:ibm:mq:9.3.0.20
-
Ibm
»
Mq
»
Version: 9.3.0.21
cpe:2.3:a:ibm:mq:9.3.0.21
-
Ibm
»
Mq
»
Version: 9.3.0.25
cpe:2.3:a:ibm:mq:9.3.0.25
-
Ibm
»
Mq
»
Version: 9.3.0.26
cpe:2.3:a:ibm:mq:9.3.0.26
-
Ibm
»
Mq
»
Version: 9.3.0.27
cpe:2.3:a:ibm:mq:9.3.0.27
-
Ibm
»
Mq
»
Version: 9.3.0.28
cpe:2.3:a:ibm:mq:9.3.0.28
-
Ibm
»
Mq
»
Version: 9.3.0.3
-
Ibm
»
Mq
»
Version: 9.3.0.30
cpe:2.3:a:ibm:mq:9.3.0.30
-
Ibm
»
Mq
»
Version: 9.3.0.31
cpe:2.3:a:ibm:mq:9.3.0.31
-
Ibm
»
Mq
»
Version: 9.3.0.36
cpe:2.3:a:ibm:mq:9.3.0.36
-
Ibm
»
Mq
»
Version: 9.3.0.37
cpe:2.3:a:ibm:mq:9.3.0.37
-
Ibm
»
Mq
»
Version: 9.3.0.4
-
Ibm
»
Mq
»
Version: 9.3.0.41
cpe:2.3:a:ibm:mq:9.3.0.41
-
Ibm
»
Mq
»
Version: 9.3.0.5
-
Ibm
»
Mq
»
Version: 9.3.0.6
-
Ibm
»
Mq
»
Version: 9.4.0.0
-
Ibm
»
Mq
»
Version: 9.4.0.10
cpe:2.3:a:ibm:mq:9.4.0.10
-
Ibm
»
Mq
»
Version: 9.4.0.11
cpe:2.3:a:ibm:mq:9.4.0.11
-
Ibm
»
Mq
»
Version: 9.4.0.12
cpe:2.3:a:ibm:mq:9.4.0.12
-
Ibm
»
Mq
»
Version: 9.4.0.15
cpe:2.3:a:ibm:mq:9.4.0.15
-
Ibm
»
Mq
»
Version: 9.4.0.17
cpe:2.3:a:ibm:mq:9.4.0.17
-
Ibm
»
Mq
»
Version: 9.4.0.20
cpe:2.3:a:ibm:mq:9.4.0.20
-
Ibm
»
Mq
»
Version: 9.4.0.25
cpe:2.3:a:ibm:mq:9.4.0.25
-
Ibm
»
Mq
»
Version: 9.4.0.5
-
Ibm
»
Mq
»
Version: 9.4.0.6
-
Ibm
»
Mq
»
Version: 9.4.0.7
-
Ibm
»
Mq
»
Version: 9.4.1
-
Ibm
»
Mq
»
Version: 9.4.1.1
-
Ibm
»
Mq
»
Version: 9.4.2
-
Ibm
»
Mq
»
Version: 9.4.2.1
-
Ibm
»
Mq
»
Version: 9.4.3
-
Ibm
»
Mq
»
Version: 9.4.3.1
-
Ibm
»
Mq
»
Version: 9.4.4.1
-
Ibm
»
Mq
»
Version: 9.4.5.0
-
Ibm
»
Mq
»
Version: 9.4.5.1