Skip to content
OpenAdvisories
High · 8.1 CVE-2026-13271 EUVD-2026-117070GHSA-pfg6-g479-pc6h

IBM MQ Managed File Transfer is affected by a denial of service vulnerability

Published Nov 4, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Vendor: IBM Product: MQ

Description

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper restriction of XML external entity references in command queue processing.

Affected products

VendorProductAffectedFixed
IBM MQ 9.2.0.0 – ≤ 9.2.0.44, 9.3.0.0 – ≤ 9.3.0.42, 9.4.0.0 – ≤ 9.4.0.26, 9.4.0.0 – ≤ 9.4.5.1, 10.0.0.0 – ≤ 10.0.0.5 —

Advisories 1

References