EUVD-2026-104467
GHSA-h67f-8f6w-77p8
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to queue manager (PR:L)
-
DeliveryCraft malicious async consume request
-
ExploitTrigger CWE-502 deserialization in agent
-
ExecutionCrash queue manager agent process
-
ImpactDenial of service to messaging clients
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A08:2025 - Software or Data Integrity Failures
ASVS 5.0
V1 - Encoding and Sanitization Safe deserialization, type allowlists
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an authenticated MQ connection (PR:L) capable of issuing an asynchronous consume (async callback MQGET) request to the queue manager; the crafted request drives untrusted deserialization (CWE-502) in the queue manager agent. Limiting factors: the attacker must already possess valid credentials or control an authorized client connection - it is not remotely exploitable by an anonymous attacker - and affected deployments are specifically the IBM MQ Operator and MQ Advanced Container Images rather than all MQ installations. No user interaction is required, and impact is limited to availability (process crash) with no data exposure or modification. |
| Impact | This is a moderate-priority availability issue, not a top-tier emergency. The CVSS 6.5 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) describes a network-reachable, low-complexity attack that nevertheless requires existing authenticated access (PR:L) and yields only availability impact - no confidentiality or integrity loss. CISA's SSVC framework reinforces a measured posture: Exploitation=none (no observed activity), Automatable=no, and Technical Impact=partial, which collectively argue against urgent prioritization. There is no KEV listing and no public exploit identified, so this is neither actively exploited nor weaponized. EPSS is not provided in the input, so probabilistic exploitation likelihood cannot be quantified here - treat its absence as a data gap, not a low score. The signals are internally consistent: a CWE-502 deserialization flaw triggered via a crafted asynchronous consume request fits the AC:L/A:H profile, and the PR:L requirement is the key mitigating factor that keeps this from being a trivially remote unauthenticated crash. Real-world risk is realistic but bounded - a malicious or compromised authenticated MQ client could repeatedly crash the queue manager agent, but an external anonymous attacker cannot. |
| Exploit ScenarioDerived | An attacker who already holds valid credentials or a compromised application connection to an IBM MQ queue manager sends a specially crafted asynchronous consume request whose malformed serialized payload is deserialized by the queue manager agent, crashing the agent process and denying service to legitimate messaging clients. No public exploit code has been identified, and the attacker must first be authenticated (PR:L), so this is most plausible as an insider or post-compromise disruption rather than an opportunistic external attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 19, 2026
Denial of service in IBM MQ Operator and MQ Advanced Container Images allows an authenticated MQ client to crash the queue manager agent by sending a crafted asynchronous consume request that triggers untrusted deserialization (CWE-502). The CVSS 6.5 vector confirms network reachability, low privileges (PR:L), no user interaction, and availability-only impact; confidentiality and integrity are unaffected, and this is a moderate-priority availability issue rather than a top-tier emergency. No public exploit was identified at time of analysis, CISA SSVC rates exploitation as none and automatable as no, and IBM has published a vendor patch.
RemediationAI
Apply the vendor patch for IBM MQ Operator and MQ Advanced Container Images as directed by IBM's advisory at https://www.ibm.com/support/pages/node/7292667; the input does not specify an exact fixed version, so use the version listed in that advisory (patch available per vendor advisory). Until patched, restrict network access to MQ listener ports to trusted clients, enforce strong authentication and least privilege so only authorized applications can issue asynchronous consume requests, and monitor and restart queue manager agents that crash. Where operationally feasible, disable or restrict asynchronous consume (async callback MQGET) functionality for untrusted or non-essential clients; the trade-off is loss of non-blocking message consumption for those applications.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
IBM MQ is message-oriented middleware; asynchronous consume/callback MQGET lets an authorized client register a callback and receive messages without blocking. CWE-502 points to deserialization of untrusted data in the queue manager agent process: a crafted async consume request is deserialized without sufficient validation, causing the agent to crash. The provided CPEs scope the issue to IBM MQ Operator (cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*) and IBM MQ Advanced Container Images (cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*), so risk is concentrated in containerized or operator-managed MQ deployments rather than all MQ installations. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms an authenticated network path, no user interaction, and availability-only impact.
Know when Mq Operator gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Authenticated MQ client access is required so PR:L (not PR:N); network-reachable and low-complexity with availability-only impact, hence AV:N/AC:L and C:N/I:N/A:H.
Primary rating from Vendor (ibm).
CVSS VectorNVD
DescriptionNVD
IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Insecure deserialization occurs when an application converts serialized data (a stream of bytes representing an object's state) back into a living object without proper validation.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Mq Operator
View allIBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configuration
Heap buffer overflow in IBM MQ Operator and IBM MQ Advanced Container Images lets an authenticated user with authority t
Denial of service and potential remote code execution in IBM MQ deployments using the MQ Operator and MQ Advanced Contai
Authenticated users of containerized IBM MQ deployments can cause denial of service or memory corruption by sending MQOP
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically define
Unauthenticated remote code execution is possible against IBM MQ deployments exposed through the MQ Operator and MQ Adva
Authenticated attackers with access to IBM MQ Operator or MQ Advanced Container Images deployments can exploit unrestric
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service c
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0,
Denial of service in IBM MQ Operator and IBM MQ Advanced container images lets an authenticated MQ client crash the queu
Authenticated denial of service in IBM MQ container deployments - specifically the MQ Operator and MQ Advanced container
Exploit-DB