CVE Feed

    Dashboard / CVE / CVE-2026-10572

    CVE-2026-10572

    IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.

    Published:Oct 19, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 19, 2026
    EPSS Score:0.00338
    CVSS Score:8.8

    Affected Products

    Vendor
    Ibm
    Product
    Mq Advanced Container Images
    Vendor
    Ibm
    Product
    Mq Operator
    Vendor
    Ibm
    Product
    Supplied Mq Advanced Container Images

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-10574 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10743 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va…
    CVE-2026-11828 (CVSS 5.9) — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha…
    CVE-2026-11829 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset…
    CVE-2026-11831 (CVSS 5.4) — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info…
    CVE-2026-12148 (CVSS 7.5) — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi…
    CVE-2026-12155 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica…
    CVE-2026-12343 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m…
    CVE-2026-12350 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async…
    CVE-2026-12660 (CVSS 2.7) — IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory du…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High