Description
IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ Appliance | 9.4.0.0 – ≤ 9.4.0.26, 9.4.1.0 – ≤ 9.4.5.3, 10.0.0.1 – ≤ 10.0.0.5 | — |
Advisories 1
- WID-SEC-2026-4343 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2026
References
- https://www.ibm.com/support/pages/node/7293035 vendor-advisory patch