CVE-2026-11828
EUVD-2026-10447319.10.2026, 17:17
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ibm | mq_operator | 3.2.0 ≤ 𝑥 ≤ 3.2.29 | CNA |
| ibm | mq_operator | 3.3.0 ≤ 𝑥 < 3.4.0 | CNA |
| ibm | mq_operator | 3.4.1 | CNA |
| ibm | mq_operator | 3.5.0 | CNA |
| ibm | mq_operator | 3.5.1 ≤ 𝑥 ≤ 3.5.3 | CNA |
| ibm | mq_operator | 3.6.0 ≤ 𝑥 ≤ 3.6.4 | CNA |
| ibm | mq_operator | 3.7.0 ≤ 𝑥 ≤ 3.7.2 | CNA |
| ibm | mq_operator | 3.8.0 | CNA |
| ibm | mq_operator | 3.8.1 | CNA |
| ibm | mq_operator | 3.9.0 | CNA |
| ibm | mq_operator | 3.9.1 | CNA |
| ibm | mq_operator | 3.9.2 | CNA |
| ibm | mq_operator | 4.0.0 | CNA |
| ibm | mq_operator | 4.0.1 | CNA |
| ibm | mq_operator | 4.0.2 | CNA |
| ibm | mq_operator | 4.0.3 | CNA |
| ibm | mq_operator | 4.0.4 | CNA |
| ibm | mq_operator | 2.0.0 ≤ 𝑥 ≤ 2.0.29 | CNA |