VYPR
High severity7.5NVD Advisory· Published Sep 18, 2026· Updated Sep 23, 2026

CVE-2026-10853

CVE-2026-10853

Description

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/MQllm-fuzzy4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*range: >=9.1.0.0,<=9.1.0.37
    • cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*range: >=9.3.0.0,<=9.3.5.1
    • cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:continuous_delivery:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

1