medium5.9
CVE-2026-11828
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client appl…
Impact
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Mq Operator | from 2.0.0 through 2.0.29 from 3.2.0 through 3.2.29 Versions 3.3.0, 3.4.0, 3.4.1, 3.5.0 |
| Ibm | Supplied Mq Advanced Container Images | Versions 9.4.1.0, 9.4.1.1, 9.4.2.0, 9.4.2.1, 9.4.3.0, 9.4.3.1 |