What’s Vulnerable › Products

IBM MQ vulnerabilities

71 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 31 published in the last 12 months.

Check whether your IBM MQ version is affected

Latest IBM MQ vulnerabilities

• CVE-2026-14511 — IBM MQ Denial of Service (CVSS 6.5)
• CVE-2026-11725 — IBM MQ queue manager is vulnerable to privilege escalation (CVSS 8.8)
• CVE-2026-11378 — IBM MQ queue manager is vulnerable to remote code execution (CVSS 8.8)
• CVE-2026-11375 — IBM MQ queue manager is vulnerable to remote code execution (CVSS 8.8)
• CVE-2026-10853 — IBM MQ queue manager is vulnerable to remote code execution (CVSS 8.8)
• CVE-2026-10751 — IBM MQ Java messaging is vulnerable to remote code execution (CVSS 7.5)
• CVE-2026-10575 — IBM MQ queue manager is vulnerable to remote code execution (CVSS 8.8)
• CVE-2026-10030 — IBM MQ Console is vulnerable to privilege escalation (CVSS 7.1)
• CVE-2026-10027 — IBM MQ queue manager is vulnerable to unauthenticated remote code execution (CVSS 9.8)
• CVE-2026-12728 — IBM MQ Java messaging is vulnerable to remote code execution (CVSS 8.8)
• CVE-2026-12667 — IBM MQ .NET client is vulnerable to XML external entity injection (CVSS 7.1)
• CVE-2026-12666 — IBM MQ Java messaging is vulnerable to XML external entity injection (CVSS 8.1)
• CVE-2026-12355 — IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution (CVSS 8.1)
• CVE-2026-12354 — IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection (CVSS 7.5)
• CVE-2026-12351 — IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection (CVSS 9.8)
• CVE-2026-12150 — IBM MQ queue manager is vulnerable to denial of service (CVSS 7.0)
• CVE-2026-11729 — IBM MQ Java messaging is vulnerable to remote code execution (CVSS 8.5)
• CVE-2026-11728 — IBM MQ .NET client is vulnerable to remote code execution (CVSS 8.1)
• CVE-2026-13265 — IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection (CVSS 6.8)
• CVE-2026-13293 — IBM MQ Java messaging is vulnerable to remote code execution (CVSS 8.8)
• CVE-2026-13287 — IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVSS 7.1)
• CVE-2026-13285 — IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVSS 7.1)
• CVE-2026-13275 — IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVSS 7.1)
• CVE-2026-1713 — IBM MQ is affected by an authority vulnerablility (CVSS 5.0)
• CVE-2025-36128 — IBM MQ denial of service (CVSS 7.5)