IBM MQ vulnerabilities
117 published CVEs name IBM MQ among the affected products.
- Published CVEs
- 117
- Last 12 months
- 35
- Critical
- 1
- Known exploited
- 0
Critical 1High 45Medium 68Low 3Not scored 0
CVEs per yearBy the year they were published
- 201711
- 201811
- 201914
- 202010
- 20213
- 20223
- 20238
- 202413
- 20259
- 202635
Newest CVEs
- CVE-2026-10859
IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
IBM · MQ
High7.5 - CVE-2026-11376
IBM MQ is affected by a denial of service vulnerability
IBM · MQ
High8.8 - CVE-2026-11724
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
IBM · MQ
High8.5 - CVE-2026-12356
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
IBM · MQ
High7.5 - CVE-2026-12550
IBM MQ is affected by a denial of service vulnerability
IBM · MQ
Medium5.4 - CVE-2026-13271
IBM MQ Managed File Transfer is affected by a denial of service vulnerability
IBM · MQ
High8.1 - CVE-2026-13284
IBM MQ Managed File Transfer is vulnerable to XML external entity injection
IBM · MQ
High7.1 - CVE-2026-13289
IBM MQ Managed File Transfer is vulnerable to XML external entity injection
IBM · MQ
High7.1 - CVE-2026-13292
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
IBM · MQ
High8.8 - CVE-2026-14252
IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility
IBM · MQ
Medium6.2
Most common weaknesses
- CWE-611 XML external entity (XXE)10
- CWE-20 Improper input validation9
- CWE-209 Sensitive information in an error message7
- CWE-502 Deserialization of untrusted data5
- CWE-770 Allocation of resources without limits5
- CWE-190 Integer overflow4
- CWE-122 Heap-based buffer overflow3
- CWE-74 Injection3
- CWE-772 3
- CWE-200 Exposure of sensitive information2