CVE-2026-11729
EUVD-2026-7890315.09.2026, 18:17
IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe deserialization that enables JNDI injection attacks.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| ibm | mq | 9.1.0.0 ≤ | CNA |
| ibm | mq | 9.2.0.0 ≤ | CNA |
| ibm | mq | 9.3.0.0 ≤ | CNA |
| ibm | mq | 9.4.0.0 ≤ | CNA |
| ibm | mq | 10.0.0.0 | CNA |
Common Weakness Enumeration