NetSight
medium5.4

CVE-2026-11831

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out…

Impact

IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request.

Affected products

VendorProductAffected versions
IbmMq Operator
from 2.0.0 through 2.0.29
from 3.2.0 through 3.2.29
Versions 3.3.0, 3.4.0, 3.4.1, 3.5.0
IbmSupplied Mq Advanced Container Images
Versions 9.4.1.0, 9.4.1.1, 9.4.2.0, 9.4.2.1, 9.4.3.0, 9.4.3.1

Weakness classification

References