EUVD-2026-104470
GHSA-j3q8-j53q-625j
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain valid low-privilege MQ credentials
-
DeliveryCraft malicious serialized Java object
-
ExploitSubmit to MQ Classes for Java interface
-
ExecutionUnrestricted deserialization triggers gadget chain
-
ImpactDenial of service or arbitrary code execution
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A08:2025 - Software or Data Integrity Failures
ASVS 5.0
V1 - Encoding and Sanitization Safe deserialization, type allowlists
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the attacker to already be authenticated (PR:L) to the IBM MQ environment and to reach the MQ Classes for Java deserialization path. The core prerequisite is that untrusted serialized Java data is accepted and deserialized without class filtering/allowlisting (CWE-502). Realistic arbitrary-code-execution additionally depends on a usable gadget chain being present on the application classpath, which is reflected in the vendor's AC:H (HIGH attack complexity) rating; absent such a gadget, impact may be limited to denial of service. Limiting factors for defenders: valid credentials are needed (not unauthenticated), the attack is non-trivial (AC:H), and the exposure is specific to deployments using the MQ Operator or MQ Advanced Container Images with the Java client classes in use. |
| Impact | This is a medium-to-high priority issue that warrants patching but is not an emergency. The vendor-supplied CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.5) describes a network-reachable but authentication-gated (PR:L) flaw with HIGH attack complexity (AC:H), meaning successful exploitation depends on conditions outside the attacker's full control - a meaningful mitigating factor for a CWE-502 unrestricted Java deserialization bug. The signals are internally consistent: AC:H aligns with deserialization gadget-chain exploitation, which typically requires a suitable gadget on the classpath, and PR:L aligns with the description's 'authenticated attacker.' No EPSS score, no CISA KEV listing, and no public POC were provided in the intelligence, so there is no evidence of active or imminent exploitation; the exploitation probability must be treated as unquantified rather than low. The combination of a patch being available and no observed exploitation means this is a 'patch in normal cycle' item rather than a drop-everything KEV-style threat, but the potential for arbitrary code execution via deserialization means it should not be deprioritized indefinitely. |
| Exploit ScenarioDerived | An attacker who already holds valid (low-privilege) credentials to an IBM MQ Operator / MQ Advanced Container Images deployment submits a crafted serialized Java object to an interface handled by the MQ Classes for Java. Because deserialization is unrestricted, a suitable gadget chain on the classpath is invoked during object reconstruction, causing a denial of service or potentially arbitrary code execution. No public exploit code was identified in the provided data, and the HIGH attack complexity suggests non-trivial conditions (e.g. a viable gadget) must be met. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 19, 2026
Authenticated attackers with access to IBM MQ Operator or MQ Advanced Container Images deployments can exploit unrestricted Java deserialization in MQ Classes for Java to cause a denial of service or potentially execute arbitrary code. The issue is rated CVSS 7.5 with high attack complexity (AC:H), reflecting the need for a usable gadget chain on the application classpath; absent one, impact is more likely limited to denial of service. Exploitation requires valid credentials and reachability of the deserialization path. No public exploit was identified at time of analysis, and a vendor patch is available per IBM's advisory.
RemediationAI
Patch available per vendor advisory: apply the IBM fix for IBM MQ Operator and IBM MQ Advanced Container Images described at https://www.ibm.com/support/pages/node/7292667, and verify the fixed release level against IBM's published matrix before deployment. Until patched, restrict network and authenticated access to MQ endpoints and channels to trusted users and systems, since exploitation requires valid credentials; this reduces exposure but does not remove the deserialization flaw. Review the application classpath for known Java deserialization gadget libraries and remove or isolate unnecessary ones, with the trade-off that dependency changes may affect application behavior. Where configurability permits, enforce Java deserialization filtering or class allowlisting for MQ Classes for Java; this can break legitimate serialized-object workflows and should be tested. Monitor for anomalous deserialization errors or resource exhaustion as a detection signal for denial-of-service attempts.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-502, deserialization of untrusted data, in IBM MQ Classes for Java as used by the IBM MQ Operator and MQ Advanced Container Images. When serialized Java objects are read without class filtering or allowlisting, an authenticated attacker who can supply crafted serialized content may trigger gadget-chain execution on the classpath, yielding code execution, or induce resource exhaustion or deserialization errors causing denial of service. The CVSS vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H indicates network reachability, authenticated access, no user interaction, and high confidentiality, integrity, and availability impact, while AC:H captures the practical constraint that a viable gadget chain and suitable deployment configuration are required. CPE entries identify IBM MQ Operator and IBM MQ Advanced Container Images as the affected product families.
Know when Mq Operator gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable (AV:N) but requires valid credentials (PR:L) and a viable deserialization gadget (AC:H); unrestricted deserialization can yield code execution, so C/I/A all High.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
DescriptionCVE.org
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.
Articles & Coverage 1
Executive ViewAI
IBM MQ Operator and MQ Advanced Container Images are affected by a high-severity flaw in MQ Classes for Java that could let an attacker with valid credentials disrupt messaging services or, under specific application conditions, execute arbitrary code. The risk is concentrated in environments where MQ accounts are broadly accessible or unnecessary Java libraries are present, because a messaging outage or code execution could interrupt integrated business processes and data flows. No public exploit identified at time of analysis, and a vendor patch is available per IBM's advisory, so leadership should prioritize inventory and remediation of affected container deployments.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Insecure deserialization occurs when an application converts serialized data (a stream of bytes representing an object's state) back into a living object without proper validation.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Mq Operator
View allIBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configuration
Heap buffer overflow in IBM MQ Operator and IBM MQ Advanced Container Images lets an authenticated user with authority t
Denial of service and potential remote code execution in IBM MQ deployments using the MQ Operator and MQ Advanced Contai
Authenticated users of containerized IBM MQ deployments can cause denial of service or memory corruption by sending MQOP
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically define
Unauthenticated remote code execution is possible against IBM MQ deployments exposed through the MQ Operator and MQ Adva
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service c
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0,
Denial of service in IBM MQ Operator and IBM MQ Advanced container images lets an authenticated MQ client crash the queu
Authenticated denial of service in IBM MQ container deployments - specifically the MQ Operator and MQ Advanced container
Authenticated users of IBM MQ Operator and IBM MQ Advanced container image deployments can cause a denial of service aga
Exploit-DB