CVE-2026-10743 - Vulnerability Details

Description

IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.

Published: 2026-10-19

Score: 8.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

IBM MQ may allow an authenticated user to trigger a denial of service or corrupt memory by failing to enforce proper buffer size limits during MQOPEN operations. The flaw stems from inadequate validation of input sizes, potentially leading to uncontrolled allocation or overwriting of memory boundaries. A successful exploitation could cause the MQ service to crash, halt message processing, or destabilize the system memory, impacting availability and stability.

Affected Systems

Affected items include IBM MQ advanced container images and the MQ operator in their various releases. Specifically, IBM MQ Operator versions v4.1.0, v4.0.5, and v3.2.30, as well as container images at 10.0.1.0-r1, 10.0.0.5-r2, 9.4.0.26-r2, and earlier 9.x releases, are susceptible. The vulnerability is present in the set of CPEs listed for IBM MQ advanced container images and the MQ operator across multiple software iterations.

Risk and Exploitability

The CVSS score of 8.8 classifies this flaw as a high severity issue. Although no EPSS score is available, the lack of an EPSS value does not diminish the potential for exploitation. The flaw is not catalogued in the CISA KEV, but the format implies that only authenticated users who can issue MQOPEN commands are required to exploit it. Attackers would need legitimate MQ credentials, and the vulnerability could be leveraged to cause service disruption or memory corruption on the host running the MQ container or operator.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

IBM

MQ Operator

unaffected

Version	Status	Constraints
`3.2.0`	affected	≤ 3.2.29
`3.3.0`	affected	< 3.4.0
`3.4.1`	affected	—
`3.5.0`	affected	—
`3.5.1`	affected	≤ 3.5.3
`3.6.0`	affected	≤ 3.6.4
`3.7.0`	affected	≤ 3.7.2
`3.8.0`	affected	—
`3.8.1`	affected	—
`3.9.0`	affected	—
`3.9.1`	affected	—
`3.9.2`	affected	—
`4.0.0`	affected	—
`4.0.1`	affected	—
`4.0.2`	affected	—
`4.0.3`	affected	—
`4.0.4`	affected	—
`2.0.0`	affected	≤ 2.0.29

IBM

MQ Advanced container images

unaffected

Version	Status	Constraints
`9.4.0.6-r1`	affected	≤ r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2
`9.4.0.6-r2`	affected	—
`9.4.0.7-r1`	affected	—
`9.4.0.10-r1`	affected	—
`9.4.0.10-r2`	affected	—
`9.4.0.11-r1`	affected	—
`9.4.0.11-r2`	affected	—
`9.4.0.11-r3`	affected	—
`9.4.0.12-r1`	affected	—
`9.4.0.15-r1`	affected	≤ 9.4.0.15-r4
`9.4.0.16-r1`	affected	—
`9.4.0.16-r2`	affected	—
`9.4.0.17-r1`	affected	—
`9.4.0.17-r2`	affected	—
`9.4.0.20-r1`	affected	—
`9.4.0.21-r1`	affected	—
`9.4.0.21-r2`	affected	—
`9.4.0.25-r1`	affected	≤ 9.4.0.25-r3
`9.4.0.26-r1`	affected	—
`9.4.1.0-r1`	affected	—
`9.4.1.0-r2`	affected	—
`9.4.1.1-r1`	affected	—
`9.4.2.0-r1`	affected	—
`9.4.2.0-r2`	affected	—
`9.4.2.1-r1`	affected	—
`9.4.2.1-r2`	affected	—
`9.4.3.0-r1`	affected	—
`9.4.3.0-r2`	affected	—
`9.4.3.1-r1`	affected	≤ 9.4.3.1-r3
`9.4.4.0-r1`	affected	—
`9.4.4.1-r1`	affected	—
`9.4.5.0-r1`	affected	—
`9.4.5.0-r2`	affected	—
`9.4.5.1-r1`	affected	—
`10.0.0.0-r1`	affected	≤ 10.0.0.0-r4
`10.0.0.5-r1`	affected	—
`9.3.0.0-r1`	affected	—
`9.3.0.0-r2`	affected	—
`9.3.0.0-r3`	affected	—
`9.3.0.1-r1`	affected	—
`9.3.0.1-r2`	affected	—
`9.3.0.1-r3`	affected	—
`9.3.0.1-r4`	affected	—
`9.3.0.3-r1`	affected	—
`9.3.0.4-r1`	affected	—
`9.3.0.4-r2`	affected	—
`9.3.0.5-r1`	affected	—
`9.3.0.5-r2`	affected	—
`9.3.0.5-r3`	affected	—
`9.3.0.6-r1`	affected	—
`9.3.0.10-r1`	affected	—
`9.3.0.10-r2`	affected	—
`9.3.0.11-r1`	affected	—
`9.3.0.11-r2`	affected	—
`9.3.0.15-r1`	affected	—
`9.3.0.16-r1`	affected	—
`9.3.0.16-r2`	affected	—
`9.3.0.17-r1`	affected	—
`9.3.0.17-r2`	affected	—
`9.3.0.17-r3`	affected	—
`9.3.0.20-r1`	affected	—
`9.3.0.20-r2`	affected	—
`9.3.0.21-r1`	affected	—
`9.3.0.21-r2`	affected	—
`9.3.0.21-r3`	affected	—
`9.3.0.25-r1`	affected	—
`9.4.0.0-r1`	affected	—
`9.4.0.0-r2`	affected	—
`9.4.0.0-r3`	affected	—
`9.4.0.5-r1`	affected	—
`9.4.0.5-r2`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:ibm:mq_operator:::::lts:::*
	cpe:2.3:a:ibm:mq_operator:::::sc2:::*
	cpe:2.3:a:ibm:mq_operator:3.3.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.4.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.4.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.5.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.5.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.5.2::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.5.3::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.6.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.6.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.6.2::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.6.3::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.6.4::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.7.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.7.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.7.2::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.8.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.8.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.9.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.9.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:3.9.2::::cd:::
	cpe:2.3:a:ibm:mq_operator:4.0.0::::cd:::
	cpe:2.3:a:ibm:mq_operator:4.0.1::::cd:::
	cpe:2.3:a:ibm:mq_operator:4.0.2::::cd:::
	cpe:2.3:a:ibm:mq_operator:4.0.3::::cd:::
	cpe:2.3:a:ibm:mq_operator:4.0.4::::cd:::
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.0:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.0:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.1:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.0:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.0:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.1:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.1:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.0:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.0:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r3:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r3:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r4:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.1:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.0:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.0:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.1:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r1:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r2:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r3:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r4:::cd:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.5:r1:::cd:::*

Configuration 2 [-]

OR	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r3:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r3:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r4:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.3:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.4:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.4:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r3:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.6:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.10:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.10:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.11:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.11:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.15:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.16:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.16:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r3:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.20:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.20:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r3:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.25:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r2:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r3:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.5:r1:::lts:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.5:r2:::lts:::*

Configuration 3 [-]

OR	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.6:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.6:r2:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.7:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.10:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.10:r2:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r2:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r3:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.12::::sc2:::
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.12:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.15:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.15:r4:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.16:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.16:r2:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.17:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.17:r2:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.20:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.21:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.21:r2:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.25:r1:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.25:r3:::sc2:::*
	cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.26:r1:::sc2:::*

No data.

Vendor Product Confidence Versions

Ibm

Mq Advanced Container Images

95%

Version	Status	Scheme	Platform
`9.4.0.6-r1`	affected	generic	—
`9.4.0.6-r2`	affected	generic	—
`9.4.0.7-r1`	affected	generic	—
`9.4.0.10-r1`	affected	generic	—
`9.4.0.10-r2`	affected	generic	—
`9.4.0.11-r1`	affected	generic	—
`9.4.0-11-r2`	affected	generic	—
`9.4.0.11-r3`	affected	generic	—
`9.4.0.12-r1`	affected	generic	—
`9.4.0.15-r1`	affected	generic	—
`9.4.0.15-r2`	affected	generic	—
`9.4.0.15-r3`	affected	generic	—
`9.4.0.15-r4`	affected	generic	—
`9.4.0.16-r1`	affected	generic	—
`9.4.0.16-r2`	affected	generic	—
`9.4.0.17-r1`	affected	generic	—
`9.4.0.17-r2`	affected	generic	—
`9.4.0.20-r1`	affected	generic	—
`9.4.0.21-r1`	affected	generic	—
`9.4.0.21-r2`	affected	generic	—
`9.4.0.25-r1`	affected	generic	—
`9.4.0.25-r2`	affected	generic	—
`9.4.0.25-r3`	affected	generic	—
`9.4.0.26-r1`	affected	generic	—
`9.4.1.0-r1`	affected	generic	—
`9.4.1.0-r2`	affected	generic	—
`9.4.1.1-r1`	affected	generic	—
`9.4.2.0-r1`	affected	generic	—
`9.4.2.0-r2`	affected	generic	—
`9.4.2.1-r1`	affected	generic	—
`9.4.2.1-r2`	affected	generic	—
`9.4.3.0-r1`	affected	generic	—
`9.4.3.0-r2`	affected	generic	—
`9.4.3.1-r1`	affected	generic	—
`9.4.3.1-r2`	affected	generic	—
`9.4.3.1-r3`	affected	generic	—
`9.4.4.0-r1`	affected	generic	—
`9.4.4.0-r2`	affected	generic	—
`9.4.4.0-r3`	affected	generic	—
`9.4.4.0-r4`	affected	generic	—
`9.4.4.1-r1`	affected	generic	—
`9.4.5.0-r1`	affected	generic	—
`9.4.5.0-r2`	affected	generic	—
`9.4.5.1-r1`	affected	generic	—
`10.0.0.0-r1`	affected	generic	—
`10.0.0.0-r2`	affected	generic	—
`10.0.0.0-r3`	affected	generic	—
`10.0.0.0-r4`	affected	generic	—
`10.0.0.5-r1`	affected	generic	—
`9.3.0.0-r1`	affected	generic	—
`9.3.0.0-r2`	affected	generic	—
`9.3.0.0-r3`	affected	generic	—
`9.3.0.1-r1`	affected	generic	—
`9.3.0.1-r2`	affected	generic	—
`9.3.0.1-r3`	affected	generic	—
`9.3.0.1-r4`	affected	generic	—
`9.3.0.3-r1`	affected	generic	—
`9.3.0.4-r1`	affected	generic	—
`9.3.0.4-r2`	affected	generic	—
`9.3.0.5-r1`	affected	generic	—
`9.3.0.5-r2`	affected	generic	—
`9.3.0.5-r3`	affected	generic	—
`9.3.0.6-r1`	affected	generic	—
`9.3.0.10-r1`	affected	generic	—
`9.3.0.10-r2`	affected	generic	—
`9.3.0.11-r1`	affected	generic	—
`9.3.0.11-r2`	affected	generic	—
`9.3.0.15-r1`	affected	generic	—
`9.3.0.16-r1`	affected	generic	—
`9.3.0.16-r2`	affected	generic	—
`9.3.0.17-r1`	affected	generic	—
`9.3.0.17-r2`	affected	generic	—
`9.3.0.17-r3`	affected	generic	—
`9.3.0.20-r1`	affected	generic	—
`9.3.0.20-r2`	affected	generic	—
`9.3.0.21-r1`	affected	generic	—
`9.3.0.21-r2`	affected	generic	—
`9.3.0.21-r3`	affected	generic	—
`9.3.0.25-r1`	affected	generic	—
`9.4.0.0-r1`	affected	generic	—
`9.4.0.0-r2`	affected	generic	—
`9.4.0.0-r3`	affected	generic	—
`9.4.0.5-r1`	affected	generic	—
`9.4.0.5-r2`	affected	generic	—

Ibm

Mq Operator

95%

Version	Status	Scheme	Platform
`[3.2.0,3.2.29]`	affected	semver	—
`[3.3.0,3.4.0)`	affected	semver	—
`3.4.1`	affected	semver	—
`3.5.0`	affected	semver	—
`[3.5.1,3.5.3]`	affected	semver	—
`[3.6.0,3.6.4]`	affected	semver	—
`[3.7.0,3.7.2]`	affected	semver	—
`3.8.0`	affected	semver	—
`3.8.1`	affected	semver	—
`3.9.0`	affected	semver	—
`3.9.1`	affected	semver	—
`3.9.2`	affected	semver	—
`4.0.0`	affected	semver	—
`4.0.1`	affected	semver	—
`4.0.2`	affected	semver	—
`4.0.3`	affected	semver	—
`4.0.4`	affected	semver	—
`[2.0.0,2.0.29]`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

Vendor Solution

Issues mentioned by this security bulletin are addressed in - * IBM MQ Operator v4.1.0 https://www.ibm.com/docs/en/ibm-mq/10.0.x CD release that included IBM supplied MQ Advanced 10.0.1.0-r1 https://www.ibm.com/docs/en/ibm-mq/10.0.x container image. * IBM MQ Operator v4.0.5 https://www.ibm.com/docs/en/ibm-mq/10.0.x SC2 release that included IBM supplied MQ Advanced 10.0.0.5-r2 https://www.ibm.com/docs/en/ibm-mq/10.0.x container image. * IBM MQ Operator v3.2.30 https://www.ibm.com/docs/en/ibm-mq/9.4.x SC2 release that included IBM supplied MQ Advanced 9.4.0.26-r2 https://www.ibm.com/docs/en/ibm-mq/9.4.x container image. * IBM MQ Container 10.0.1.0-r1 https://www.ibm.com/docs/en/ibm-mq/10.0.x and 10.0.0.5-r2 https://www.ibm.com/docs/en/ibm-mq/10.0.x release. IBM strongly recommends applying the latest container images. IBM MQ Operator v4.1.0 CD release details: Image Fix Version Registry Image Location ibm-mq-operator v4.1.0 icr.io icr.io/cpopen/ibm-mq-operator@sha256:ed9a217869637c8749270fd485517ea62c8dffbd198a8f7090042ebbeb5bd127 ibm-mqadvanced-server 10.0.1.0-r1 cp.icr.io cp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3 ibm-mqadvanced-server-dev 10.0.1.0-r1 icr.io icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2 IBM MQ Operator v4.0.5 SC2 release details: Image Fix Version Registry Image Location ibm-mq-operator v4.0.5 icr.io icr.io/cpopen/ibm-mq-operator@sha256:1109597707dfb3fbde274e39698f08a9011f13ca75746a30414e246459571930 ibm-mqadvanced-server 10.0.0.5-r2 cp.icr.io cp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652 ibm-mqadvanced-server-dev 10.0.0.5-r2 icr.io icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b IBM MQ Operator v3.2.30 SC2 release details: Image Fix Version Registry Image Location ibm-mq-operator v3.2.30 icr.io icr.io/cpopen/ibm-mq-operator@sha256:57dda3eb0391e540ff18029fdcd44a14951a73860bdc7544be5879a8ca49fc40 ibm-mqadvanced-server 9.4.0.26-r2 cp.icr.io cp.icr.io/cp/ibm-mqadvanced-server@sha256:4fc5474a0cd9da504bd4bd26ce5c0b91e088656aa56decb315b450ac7868b7e8 ibm-mqadvanced-server-integration 9.4.0.26-r2 cp.icr.io cp.icr.io/cp/ibm-mqadvanced-server-integration@sha256:a6656d4b9c7db64dd9247c22a00607baf2c9141392d7bf5860a93325604f26ad ibm-mqadvanced-server-dev 9.4.0.26-r2 icr.io icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:abf4c7e931f77aa2aeb340ad054edb35c0f382bf4a7c776d838afab23106b06a IBM MQ Container 10.0.1.0-r1 release details: Image Fix Version Registry Image Location ibm-mqadvanced-server 10.0.1.0-r1 cp.icr.io cp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3 ibm-mqadvanced-server-dev 10.0.1.0-r1 icr.io icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2 IBM MQ Container 10.0.0.5-r2 release details: Image Fix Version Registry Image Location ibm-mqadvanced-server 10.0.0.5-r2 cp.icr.io cp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652 ibm-mqadvanced-server-dev 10.0.0.5-r2 icr.io icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b

OpenCVE Recommended Actions

Upgrade IBM MQ Operator to the latest released image, for example v4.1.0, pulling the container from icr.io/cpopen/ibm-mq-operator or the specified registry URL provided in the vendor release notes.
Replace all IBM MQ advanced container images with the patched versions, such as 10.0.1.0‑r1 or 10.0.0.5‑r2, fetching the images from cp.icr.io/cp/ibm-mqadvanced-server or icr.io/ibm-messaging/ibm-mqadvanced-server‑dev as indicated in the security bulletin.
Ensure all Kubernetes deployments or container orchestration platforms use the updated images, reconcile any pending or rolling updates, and verify that no pods are running older, vulnerable image tags.

Generated by OpenCVE AI on October 19, 2026 at 17:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00283.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://www.ibm.com/support/pages/node/7292667

History

Fri, 23 Oct 2026 15:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ibm supplied Mq Advanced Container Images
CPEs		cpe:2.3:a:ibm:mq_operator:::::lts:::* cpe:2.3:a:ibm:mq_operator:::::sc2:::* cpe:2.3:a:ibm:mq_operator:3.3.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.4.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.4.1::::cd::: cpe:2.3:a:ibm:mq_operator:3.5.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.5.1::::cd::: cpe:2.3:a:ibm:mq_operator:3.5.2::::cd::: cpe:2.3:a:ibm:mq_operator:3.5.3::::cd::: cpe:2.3:a:ibm:mq_operator:3.6.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.6.1::::cd::: cpe:2.3:a:ibm:mq_operator:3.6.2::::cd::: cpe:2.3:a:ibm:mq_operator:3.6.3::::cd::: cpe:2.3:a:ibm:mq_operator:3.6.4::::cd::: cpe:2.3:a:ibm:mq_operator:3.7.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.7.1::::cd::: cpe:2.3:a:ibm:mq_operator:3.7.2::::cd::: cpe:2.3:a:ibm:mq_operator:3.8.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.8.1::::cd::: cpe:2.3:a:ibm:mq_operator:3.9.0::::cd::: cpe:2.3:a:ibm:mq_operator:3.9.1::::cd::: cpe:2.3:a:ibm:mq_operator:3.9.2::::cd::: cpe:2.3:a:ibm:mq_operator:4.0.0::::cd::: cpe:2.3:a:ibm:mq_operator:4.0.1::::cd::: cpe:2.3:a:ibm:mq_operator:4.0.2::::cd::: cpe:2.3:a:ibm:mq_operator:4.0.3::::cd::: cpe:2.3:a:ibm:mq_operator:4.0.4::::cd::: cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r3:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r4:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.5:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r3:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.10:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.10:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.11:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.11:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.15:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.16:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.16:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r3:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r3:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r4:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.20:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.20:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r3:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.25:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.3:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.4:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.4:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r3:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.6:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r3:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.10:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.10:r2:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r2:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r3:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.12::::sc2::: cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.12:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.15:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.15:r4:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.16:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.16:r2:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.17:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.17:r2:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.20:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.21:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.21:r2:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.25:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.25:r3:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.26:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.5:r1:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.5:r2:::lts:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.6:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.6:r2:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.7:r1:::sc2:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.0:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.0:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.1:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.0:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.0:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.1:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.1:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.0:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.0:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r3:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r3:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r4:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.1:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.0:r1:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.0:r2:::cd:::* cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.1:r1:::cd:::*
Vendors & Products		Ibm supplied Mq Advanced Container Images

Mon, 19 Oct 2026 19:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 19 Oct 2026 16:45:00 +0000

Type	Values Removed	Values Added
Description		IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.
Title		IBM MQ Race Condition
First Time appeared		Ibm Ibm mq Advanced Container Images Ibm mq Operator
Weaknesses		CWE-1223
CPEs		cpe:2.3:a:ibm:mq_advanced_container_images:::::::: cpe:2.3:a:ibm:mq_advanced_container_images:10.0.0.5-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r4:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.15-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.25-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.3-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.6-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r3:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.12-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.20-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.26-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.7-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.1-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.1-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r1:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r2:::::::* cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.1-r1:::::::* cpe:2.3:a:ibm:mq_operator:::::::: cpe:2.3:a:ibm:mq_operator:3.4.1:::::::* cpe:2.3:a:ibm:mq_operator:3.5.0:::::::* cpe:2.3:a:ibm:mq_operator:3.8.0:::::::* cpe:2.3:a:ibm:mq_operator:3.8.1:::::::* cpe:2.3:a:ibm:mq_operator:3.9.0:::::::* cpe:2.3:a:ibm:mq_operator:3.9.1:::::::* cpe:2.3:a:ibm:mq_operator:3.9.2:::::::* cpe:2.3:a:ibm:mq_operator:4.0.0:::::::* cpe:2.3:a:ibm:mq_operator:4.0.1:::::::* cpe:2.3:a:ibm:mq_operator:4.0.2:::::::* cpe:2.3:a:ibm:mq_operator:4.0.3:::::::* cpe:2.3:a:ibm:mq_operator:4.0.4:::::::*
Vendors & Products		Ibm Ibm mq Advanced Container Images Ibm mq Operator
References		https://www.ibm.com/support/pages/node/7292667
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Subscriptions

Ibm Mq Advanced Container Images Mq Operator Supplied Mq Advanced Container Images

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-10-19T16:41:25.083Z

Updated: 2026-10-20T03:55:38.958Z

Reserved: 2026-06-03T13:27:15.655Z

Link: CVE-2026-10743

Vulnrichment

Updated: 2026-10-19T18:20:12.638Z

NVD

Status : Analyzed

Published: 2026-10-19T17:17:02.107

Modified: 2026-10-23T15:33:41.670

Link: CVE-2026-10743

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-20T22:00:14Z

Weaknesses

CWE-1223
Race Condition for Write-Once Attributes

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object