8.1
CVE-2026-11728
- EPSS 0.59%
- Veröffentlicht 15.09.2026 17:42:20
- Zuletzt bearbeitet 16.09.2026 19:21:55
- Erkennungen
IBM MQ .NET client is vulnerable to remote code execution
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerIBM
≫
Produkt
MQ
Version <=
9.1.0.37 LTS
Version
9.1.0.0
Status
affected
Version <=
9.2.0.43 LTS
Version
9.2.0.0
Status
affected
Version <=
9.3.0.41 LTS
Version
9.3.0.0
Status
affected
Version <=
9.3.5.1 CD
Version
9.3.0.0
Status
affected
Version <=
9.4.0.25 LTS
Version
9.4.0.0
Status
affected
Version <=
9.4.5.1 CD
Version
9.4.0.0
Status
affected
Version
10.0.0.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.59% | 0.465 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| IBM | 8.1 | 2.2 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://www.ibm.com/support/pages/node/7284943