Security Vulnerabilities
IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference.
CVSS Score
6.5
EPSS Score
0.003
Published
2026-10-19
IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.
CVSS Score
6.5
EPSS Score
0.002
Published
2026-10-19
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.
CVSS Score
5.9
EPSS Score
0.003
Published
2026-10-19
IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.
CVSS Score
6.5
EPSS Score
0.002
Published
2026-10-19
IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request.
CVSS Score
5.4
EPSS Score
0.002
Published
2026-10-19
IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-10-19
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-10-19
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-10-19
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
CVSS Score
5.4
EPSS Score
0.001
Published
2026-10-16
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.
CVSS Score
5.4
EPSS Score
0.001
Published
2026-10-16