Description
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation, potentially leading to information disclosure or remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ | 9.1.0.0 – ≤ 9.1.0.37 LTS, 9.2.0.0 – ≤ 9.2.0.43 LTS, 9.3.0.0 – ≤ 9.3.0.41 LTS, 9.3.0.0 – ≤ 9.3.5.1 CD, 9.4.0.0 – ≤ 9.4.0.25 LTS, 9.4.0.0 – ≤ 9.4.5.1 CD, 10.0.0.0 | — |
Advisories 1
- WID-SEC-2026-3409 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 22, 2026
References
- https://www.ibm.com/support/pages/node/7284912 vendor-advisory patch