Description
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests with crafted buffer size values.
Published: 2026-11-04
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Apply Patches
AI Analysis

Impact

The vulnerability is an integer overflow in the handling of subscription requests with specially crafted buffer size values. When an authenticated attacker sends a malformed subscription request, the overflow can cause the message broker to become unresponsive, leading to a denial of service, or possibly allow execution of arbitrary code. The weakness belongs to CWE‑190, Integer Overflow or Wraparound, and is manifested through unsanitized input processing.

Affected Systems

IBM MQ products are affected: IBM MQ 9.2 LTS versions 9.2.0.0 through 9.2.0.44, IBM MQ 9.3 LTS versions 9.3.0.0 through 9.3.0.42, IBM MQ 9.4 LTS versions 9.4.0.0 through 9.4.0.26, IBM MQ 9.4 Community Edition versions 9.4.0.0 through 9.4.5.1, and IBM MQ 10.0 LTS and Community Edition versions 10.0.0.0 through 10.0.0.5.

Risk and Exploitability

The CVSS base score is 8.8, indicating a high severity issue. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to have valid MQ credentials to submit subscription requests, implying that the attack can be carried out over the network if authentication is possible, but it remains a credential‑dependent vector. The impact is a local or remote denial of service that could be escalated to arbitrary code execution in the worst case.

Generated by OpenCVE AI on November 4, 2026 at 21:22 UTC.

Remediation

Vendor Solution

This issue was addressed under Known Issue DT473422. IBM MQ version 9.2 LTS Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts IBM MQ version 9.3 LTS Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts IBM MQ version 9.4 LTS Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94 IBM MQ version 10.0.LTS Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100 IBM MQ version 9.4 CD and 10.0 CD Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100

OpenCVE Recommended Actions

  • Apply the latest IBM MQ security update or fix pack for your version: for 9.2 LTS apply cumulative security update 9.2.0.46, for 9.3 LTS apply cumulative security update 9.3.0.43, for 9.4 LTS apply fix pack 9.4.0.30, for 10.0 LTS upgrade to 10.0.0.6, and for 9.4 CD/10.0 CD upgrade to 10.0.1.0.
  • Restrict or disable subscription functionality on servers that do not need it, thereby narrowing the attack surface for authenticated users.
  • Enforce strict authentication and privilege controls so that only authorized users can create or delete subscriptions, and use audit logging to detect anomalous subscription activity.

Generated by OpenCVE AI on November 4, 2026 at 21:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 20:45:00 +0000

Type Values Removed Values Added
Description IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests with crafted buffer size values.
Title IBM MQ is affected by a denial of service vulnerability
First Time appeared Ibm
Ibm mq
Weaknesses CWE-190
CPEs cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm mq
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Mq
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-04T20:26:07.027Z

Reserved: 2026-06-05T12:37:48.064Z

Link: CVE-2026-11376

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-04T21:17:56.403

Modified: 2026-11-04T21:17:56.530

Link: CVE-2026-11376

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-04T21:30:09Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound