Skip to content
CVE Tracker
IBM

IBM MQ vulnerabilities

106 published CVEs name IBM MQ among the affected products.

All 106 in the listAtom feed of new CVEs
Published CVEs
106
Last 12 months
24
Critical
1
Known exploited
0

Critical 1High 36Medium 66Low 3Not scored 0

CVEs per yearBy the year they were published

  1. 20171
  2. 201815
  3. 201910
  4. 20205
  5. 202016
  6. 20223
  7. 20235
  8. 20246
  9. 20256
  10. 202515
  11. 202624

Newest CVEs

  • CVE-2026-14511

    IBM MQ Denial of Service

    IBM · MQ

    Medium6.5
  • CVE-2026-11725

    IBM MQ queue manager is vulnerable to privilege escalation

    IBM · MQ

    High8.8
  • CVE-2026-11378

    IBM MQ queue manager is vulnerable to remote code execution

    IBM · MQ

    High8.8
  • CVE-2026-11375

    IBM MQ queue manager is vulnerable to remote code execution

    IBM · MQ

    High8.8
  • CVE-2026-10853

    IBM MQ queue manager is vulnerable to remote code execution

    IBM · MQ

    High7.5
  • CVE-2026-10751

    IBM MQ Java messaging is vulnerable to remote code execution

    IBM · MQ

    High7.5
  • CVE-2026-10575

    IBM MQ queue manager is vulnerable to remote code execution

    IBM · MQ

    High8.8
  • CVE-2026-10030

    IBM MQ Console is vulnerable to privilege escalation

    IBM · MQ

    High7.1
  • CVE-2026-10027

    IBM MQ queue manager is vulnerable to unauthenticated remote code execution

    IBM · MQ

    High8.1
  • CVE-2026-11728

    IBM MQ .NET client is vulnerable to remote code execution

    IBM · MQ

    High8.1

Most common weaknesses

  1. CWE-20 Improper input validation8
  2. CWE-209 Sensitive information in an error message7
  3. CWE-611 XML external entity (XXE)7
  4. CWE-502 Deserialization of untrusted data5
  5. CWE-770 Allocation of resources without limits5
  6. CWE-772 3
  7. CWE-122 Heap-based buffer overflow2
  8. CWE-190 Integer overflow2
  9. CWE-200 Exposure of sensitive information2
  10. CWE-266 2