CVSS 5.9 (medium) · published 2026-10-19
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.
Affected products (NVD): ibm mq_operator, ibm supplied_mq_advanced_container_images
Weakness: CWE-120
Source: NVD CVE-2026-11828
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.