CVE-2026-10575

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10575", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-06-01T17:14:23.234Z", "datePublished": "2026-09-18T15:53:06.233Z", "dateUpdated": "2026-09-21T12:47:23.718Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-18T15:53:06.233Z"}, "title": "IBM MQ queue manager is vulnerable to remote code execution", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "MQ", "versions": [{"status": "affected", "version": "9.1.0.0", "lessThanOrEqual": "9.1.0.37 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.2.0.0", "lessThanOrEqual": "9.2.0.43 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.3.0.0", "lessThanOrEqual": "9.3.0.41 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.3.0.0", "lessThanOrEqual": "9.3.5.1 CD", "versionType": "semver"}, {"status": "affected", "version": "9.4.0.0", "lessThanOrEqual": "9.4.0.25 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.4.0.0", "lessThanOrEqual": "9.4.5.1 CD", "versionType": "semver"}, {"status": "affected", "version": "10.0.0.0"}], "cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7287778", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "This issue was addressed under Known Issue DT472393\n\n\n\nIBM MQ version 9.1 LTS\n\n\n\n Apply cumulative security update 9.1.0.38 https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts \n\n\n\nIBM MQ version 9.2 LTS\n\n\n\n Apply cumulative security update 9.2.0.44 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts \n\n\n\nIBM MQ version 9.3 LTS\n\n\n\n Apply cumulative security update 9.3.0.42 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts \n\n\n\nIBM MQ version 9.4 LTS\n\n\n\n Apply cumulative security update https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts \u00a09.4.0.26 https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts \n\n\n\nIBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0\n\n\n\n Upgrade to IBM MQ version 10.0.0.5 https://www.ibm.com/support/pages/downloading-ibm-mq-100", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>This issue was addressed under Known Issue DT472393</p><p>IBM MQ version 9.1 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.1.0.38</a></p><p>IBM MQ version 9.2 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.2.0.44</a></p><p>IBM MQ version 9.3 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.3.0.42</a></p><p>IBM MQ version 9.4 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update</a><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">\u00a09.4.0.26</a></p><p>IBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-100\" rel=\"noopener noreferrer nofollow\">Upgrade to IBM MQ version 10.0.0.5</a></p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10575", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-19T03:56:44.436047Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-21T12:47:23.718Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10575", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-19T03:56:44.436047Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-21T12:45:09.256Z"}}], "cna": {"title": "IBM MQ queue manager is vulnerable to remote code execution", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "MQ", "versions": [{"status": "affected", "version": "9.1.0.0", "versionType": "semver", "lessThanOrEqual": "9.1.0.37 LTS"}, {"status": "affected", "version": "9.2.0.0", "versionType": "semver", "lessThanOrEqual": "9.2.0.43 LTS"}, {"status": "affected", "version": "9.3.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.0.41 LTS"}, {"status": "affected", "version": "9.3.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.5.1 CD"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.0.25 LTS"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.5.1 CD"}, {"status": "affected", "version": "10.0.0.0"}]}], "solutions": [{"lang": "en", "value": "This issue was addressed under Known Issue DT472393\n\n\n\nIBM MQ version 9.1 LTS\n\n\n\n Apply cumulative security update 9.1.0.38 https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts \n\n\n\nIBM MQ version 9.2 LTS\n\n\n\n Apply cumulative security update 9.2.0.44 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts \n\n\n\nIBM MQ version 9.3 LTS\n\n\n\n Apply cumulative security update 9.3.0.42 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts \n\n\n\nIBM MQ version 9.4 LTS\n\n\n\n Apply cumulative security update https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts \u00a09.4.0.26 https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts \n\n\n\nIBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0\n\n\n\n Upgrade to IBM MQ version 10.0.0.5 https://www.ibm.com/support/pages/downloading-ibm-mq-100", "supportingMedia": [{"type": "text/html", "value": "<p>This issue was addressed under Known Issue DT472393</p><p>IBM MQ version 9.1 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.1.0.38</a></p><p>IBM MQ version 9.2 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.2.0.44</a></p><p>IBM MQ version 9.3 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.3.0.42</a></p><p>IBM MQ version 9.4 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update</a><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">\u00a09.4.0.26</a></p><p>IBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-100\" rel=\"noopener noreferrer nofollow\">Upgrade to IBM MQ version 10.0.0.5</a></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7287778", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-18T15:53:06.233Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10575", "state": "PUBLISHED", "dateUpdated": "2026-09-21T12:47:23.718Z", "dateReserved": "2026-06-01T17:14:23.234Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-09-18T15:53:06.233Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"], "product": "MQ", "vendor": "IBM", "versions": [{"lessThanOrEqual": "9.1.0.37 LTS", "status": "affected", "version": "9.1.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.2.0.43 LTS", "status": "affected", "version": "9.2.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.3.0.41 LTS", "status": "affected", "version": "9.3.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.3.5.1 CD", "status": "affected", "version": "9.3.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.4.0.25 LTS", "status": "affected", "version": "9.4.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.4.5.1 CD", "status": "affected", "version": "9.4.0.0", "versionType": "semver"}, {"status": "affected", "version": "10.0.0.0"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*", "matchCriteriaId": "D96417F2-11E6-409A-B3D9-029D1F9439A7", "versionEndIncluding": "9.1.0.37", "versionStartIncluding": "9.1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*", "matchCriteriaId": "D0A693FB-D40D-4E59-B376-B2C261C2D9C0", "versionEndIncluding": "9.2.0.43", "versionStartIncluding": "9.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*", "matchCriteriaId": "237687C2-94CE-4F13-B843-2203AFA56891", "versionEndIncluding": "9.3.0.41", "versionStartIncluding": "9.3.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*", "matchCriteriaId": "86E7AEF9-AABE-44D3-83AB-629F95270458", "versionEndIncluding": "9.3.5.1", "versionStartIncluding": "9.3.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*", "matchCriteriaId": "781729F4-DDEA-44C8-AE89-40D8F6B52DEB", "versionEndIncluding": "9.4.0.25", "versionStartIncluding": "9.4.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*", "matchCriteriaId": "53BCC172-C8CC-4B55-A7C5-F262E5CC7274", "versionEndIncluding": "9.4.5.1", "versionStartIncluding": "9.4.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:continuous_delivery:*:*:*", "matchCriteriaId": "7038C548-5958-4719-B03F-C255E8CA82A0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers."}], "id": "CVE-2026-10575", "lastModified": "2026-09-23T18:32:15.760", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10575", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-09-19T03:56:44.436047Z", "version": "2.0.3"}}]}, "published": "2026-09-18T16:17:04.150", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7287778"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.1.0.0,9.1.0.37 LTS]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.2.0.0,9.2.0.43 LTS]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.3.0.0,9.3.0.41 LTS]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.3.0.0,9.3.5.1 CD]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.4.0.0,9.4.0.25 LTS]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.4.0.0,9.4.5.1 CD]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "10.0.0.0"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "MQ", "source": "cna", "vendor": "IBM"}, "product": "mq", "vendor": "ibm"}], "created": "2026-09-18T21:45:14.224318+00:00", "updated": "2026-09-19T18:00:14.002197+00:00", "vendors": ["ibm", "ibm$PRODUCT$mq"]}