Login Request a demo
MO
Product
MQ Operator
by IBM · last CVE Oct 19, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 3High 8Medium 17Low 1
Severity
All severities29Critical3High8Medium17Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ Operator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-10572
8.8
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-10574
8.8
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-10743
8.8
0%
Oct 19
IBM MQ Race Condition
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12148
8.8
0%
Oct 19
IBM MQ Deserialization of Untrusted Data
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2024-40681
8.8
0%
Sep 7
IBM MQ security bypass
Affected: 2.0.0 through 2.0.25; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.3; +2 more
CVE-2024-27256
7.5
0%
Jan 27
IBM MQ Operator information disclosure
Affected: 2.4.0 through 2.4.8; 2.3.0 through 2.3.3; 2.2.0 through 2.2.2; 2.0.0 LTS through 2.0.22 LTS; 3.0.0 CD, 3.0.1 CD; 3.1.0 CD through 3.1.3 CD
CVE-2024-39743
7.5
1%
Jul 8
IBM MQ Container denial of service
Affected: 2.0.24, 3.2.2
CVE-2024-27255
7.5
0%
Mar 3
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected…
Affected: 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.7; 2.0.0; 2.0.18; 3.0.0; +1 more
Showing 8