MO
Product
MQ Operator
29
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 3High 8Medium 17Low 1
Watch
Add MQ Operator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12665 | 9.8 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-36041 | 9.8 | Jun 15 | IBM MQ improper certificate validation Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.5.3 CD; 3.2.0 SC2 through 3.2.10 SC2 |
| CVE-2024-39742 | 9.8 | Jul 8 | IBM MQ Container authentication bypass Affected: 2.0.24, 3.2.2 |
| CVE-2026-10572 | 8.8 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-10574 | 8.8 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-10743 | 8.8 | Oct 19 | IBM MQ Race Condition Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12148 | 8.8 | Oct 19 | IBM MQ Deserialization of Untrusted Data Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2024-40681 | 8.8 | Sep 7 | IBM MQ security bypass Affected: 2.0.0 through 2.0.25; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.3; +2 more |
| CVE-2024-27256 | 7.5 | Jan 27 | IBM MQ Operator information disclosure Affected: 2.4.0 through 2.4.8; 2.3.0 through 2.3.3; 2.2.0 through 2.2.2; 2.0.0 LTS through 2.0.22 LTS; 3.0.0 CD, 3.0.1 CD; 3.1.0 CD through 3.1.3 CD |
| CVE-2024-39743 | 7.5 | Jul 8 | IBM MQ Container denial of service Affected: 2.0.24, 3.2.2 |
| CVE-2024-27255 | 7.5 | Mar 3 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected… Affected: 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.7; 2.0.0; 2.0.18; 3.0.0; +1 more |
| CVE-2026-11829 | 6.5 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12155 | 6.5 | Oct 19 | IBM MQ Deserialization of Untrusted Data Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12343 | 6.5 | Oct 19 | IBM MQ Denial of Service Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12350 | 6.5 | Oct 19 | IBM MQ Deserialization of Untrusted Data Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12670 | 6.5 | Oct 19 | IBM MQ Denial of Service Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-36005 | 6.5 | Jul 24 | IBM MQ Operator information disclosure Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.6.0 CD; 3.2.0 SC2 through 3.2.13 SC2 |
| CVE-2025-1333 | 6.5 | May 1 | IBM MQ Operator information disclosure Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1 CD; 3.2.0 SC2 through 3.2.10 SC2 |
| CVE-2025-27365 | 6.5 | May 1 | IBM MQ Operator denial of service Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1 CD; 3.2.0 SC2 through 3.2.10 SC2 |
| CVE-2026-11828 | 5.9 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-33013 | 5.5 | Jul 24 | IBM MQ Operator information disclosure Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.6.0 CD; 3.2.0 SC2 through 3.2.13 SC2 |
| CVE-2024-40680 | 5.5 | Sep 7 | IBM MQ denial of service Affected: 2.0.26; 3.2.4 |
| CVE-2023-47745 | 5.5 | Mar 3 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user… Affected: 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.7; 2.0.0; 2.0.18; 3.0.0; +1 more |
| CVE-2026-11831 | 5.4 | Oct 19 | IBM MQ Heap-based Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-2607 | 5.1 | May 27 | Multiple vulnerabilities in IBM MQ Operator and Queue manager container images Affected: SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29 |
| CVE-2026-12669 | 4.3 | Oct 19 | IBM MQ Out-of-bounds Read Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12727 | 4.3 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-12755 | 4.0 | Feb 17 | Multiple vulnerabilities in IBM MQ Operator and Queue manager container images Affected: SC2: v3.2.0 through 3.2.21; CD: v3.3.0 through 3.8.1; LTS: v2.0.0 through 2.0.29 |
| CVE-2026-12660 | 2.7 | Oct 19 | IBM MQ Path Traversal Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
Showing 29