CVE-2026-18142: ibm mq

CVSS 7.1 (high) · published 2026-11-04

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.

Affected products (NVD): ibm mq

Fixed in (NVD): 9.2.0.46, 9.3.0.43, 9.4.0.30, 10.0.0.6

Weakness: CWE-190

Source: NVD CVE-2026-18142

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.