VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 18, 2026· Updated Sep 23, 2026

CVE-2026-10575

CVE-2026-10575

Description

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/MQ4 versions
    cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*+ 3 more
    • cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*range: >=9.3.0.0,<=9.3.5.1
    • cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*range: >=9.1.0.0,<=9.1.0.37
    • cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:continuous_delivery:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

1