What’s Vulnerable › Products

IBM MQ Operator vulnerabilities

29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.

Check whether your IBM MQ Operator version is affected

Latest IBM MQ Operator vulnerabilities

• CVE-2026-12727 — IBM MQ Buffer Overflow (CVSS 4.3)
• CVE-2026-12670 — IBM MQ Denial of Service (CVSS 6.5)
• CVE-2026-12669 — IBM MQ Out-of-bounds Read (CVSS 4.3)
• CVE-2026-12665 — IBM MQ Buffer Overflow (CVSS 9.8)
• CVE-2026-12660 — IBM MQ Path Traversal (CVSS 2.7)
• CVE-2026-12350 — IBM MQ Deserialization of Untrusted Data (CVSS 6.5)
• CVE-2026-12343 — IBM MQ Denial of Service (CVSS 6.5)
• CVE-2026-12155 — IBM MQ Deserialization of Untrusted Data (CVSS 6.5)
• CVE-2026-12148 — IBM MQ Deserialization of Untrusted Data (CVSS 8.8)
• CVE-2026-11831 — IBM MQ Heap-based Buffer Overflow (CVSS 5.4)
• CVE-2026-11829 — IBM MQ Buffer Overflow (CVSS 6.5)
• CVE-2026-11828 — IBM MQ Buffer Overflow (CVSS 5.9)
• CVE-2026-10743 — IBM MQ Race Condition (CVSS 8.8)
• CVE-2026-10574 — IBM MQ Buffer Overflow (CVSS 8.8)
• CVE-2026-10572 — IBM MQ Buffer Overflow (CVSS 8.8)
• CVE-2026-2607 — Multiple vulnerabilities in IBM MQ Operator and Queue manager container images (CVSS 5.1)
• CVE-2025-12755 — Multiple vulnerabilities in IBM MQ Operator and Queue manager container images (CVSS 4.0)
• CVE-2025-36005 — IBM MQ Operator information disclosure (CVSS 6.5)
• CVE-2025-33013 — IBM MQ Operator information disclosure (CVSS 5.5)
• CVE-2025-36041 — IBM MQ improper certificate validation (CVSS 9.8)
• CVE-2025-27365 — IBM MQ Operator denial of service (CVSS 6.5)
• CVE-2025-1333 — IBM MQ Operator information disclosure (CVSS 6.5)
• CVE-2024-27256 — IBM MQ Operator information disclosure (CVSS 7.5)
• CVE-2024-40681 — IBM MQ security bypass (CVSS 8.8)
• CVE-2024-40680 — IBM MQ denial of service (CVSS 5.5)