CVE-2026-10853

EUVD-2026-83032
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.
Unsafe Reflection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 45.78%
Affected Products (NVD)
VendorProductVersion
ibmmq
9.1.0.0 ≤
𝑥
≤ 9.1.0.37
ibmmq
9.2.0.0 ≤
𝑥
≤ 9.2.0.43
ibmmq
9.3.0.0 ≤
𝑥
≤ 9.3.0.41
ibmmq
9.3.0.0 ≤
𝑥
≤ 9.3.5.1
ibmmq
9.4.0.0 ≤
𝑥
≤ 9.4.0.25
ibmmq
9.4.0.0 ≤
𝑥
≤ 9.4.5.1
ibmmq
10.0.0.0
𝑥
= Vulnerable software versions