Mq CVE-2026-12355

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 L

IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack wh

We need to produce JSON. Need include "sanok" lowercase once in risk_assessment only, natural prose, hypothetical mid-si

IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations du

We need produce JSON. Let's analyze. CVE-2026-11729 IBM MQ, unsafe deserialization enabling JNDI injection, authenticat

A heap buffer overflow in the IBM MQ client (CWE-787) can be triggered when the client processes crafted messages delive

IBM MQ message queueing middleware fails to properly restrict XML external entity resolution while processing MQRFH2 mes

Authenticated IBM MQ users can trigger arbitrary code execution on the application server through the Resource Adapter I

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error app

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service at

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a d