CVE Feed

    Dashboard / CVE / CVE-2026-11828

    CVE-2026-11828

    IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.

    Published:Oct 19, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 19, 2026
    EPSS Score:0.00254
    CVSS Score:5.9

    Affected Products

    Vendor
    Ibm
    Product
    Mq Advanced Container Images
    Vendor
    Ibm
    Product
    Mq Operator
    Vendor
    Ibm
    Product
    Supplied Mq Advanced Container Images

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-10572 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10574 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10743 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va…
    CVE-2026-11829 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset…
    CVE-2026-11831 (CVSS 5.4) — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info…
    CVE-2026-12148 (CVSS 7.5) — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi…
    CVE-2026-12155 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica…
    CVE-2026-12343 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m…
    CVE-2026-12350 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async…
    CVE-2026-12660 (CVSS 2.7) — IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory du…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High