Login Request a demo
MO
Product
MQ Operator
by IBM · last CVE Oct 19, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 3High 8Medium 17Low 1
Severity
All severities29Critical3High8Medium17Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ Operator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-11829
6.5
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12155
6.5
0%
Oct 19
IBM MQ Deserialization of Untrusted Data
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12343
6.5
0%
Oct 19
IBM MQ Denial of Service
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12350
6.5
0%
Oct 19
IBM MQ Deserialization of Untrusted Data
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12670
6.5
0%
Oct 19
IBM MQ Denial of Service
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2025-36005
6.5
0%
Jul 24
IBM MQ Operator information disclosure
Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.6.0 CD; 3.2.0 SC2 through 3.2.13 SC2
CVE-2025-1333
6.5
0%
May 1
IBM MQ Operator information disclosure
Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1 CD; 3.2.0 SC2 through 3.2.10 SC2
CVE-2025-27365
6.5
0%
May 1
IBM MQ Operator denial of service
Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1 CD; 3.2.0 SC2 through 3.2.10 SC2
CVE-2026-11828
5.9
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2025-33013
5.5
0%
Jul 24
IBM MQ Operator information disclosure
Affected: 2.0.0 LTS through 2.0.29 LTS; 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.6.0 CD; 3.2.0 SC2 through 3.2.13 SC2
CVE-2024-40680
5.5
0%
Sep 7
IBM MQ denial of service
Affected: 2.0.26; 3.2.4
CVE-2023-47745
5.5
0%
Mar 3
IBM MQ Container information disclosure
Affected: 2.0.0 LTS through 2.0.18 LTS; 2.4.0 through 2.4.7; 2.3.0 through 2.3.3; 2.2.0 through 2.2.2; 3.0.0 CD through 3.0.1 CD
CVE-2026-11831
5.4
0%
Oct 19
IBM MQ Heap-based Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-2607
5.1
0%
May 27
Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Affected: SC2: v3.2.0 through 3.2.23CD:  v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29
CVE-2026-12669
4.3
0%
Oct 19
IBM MQ Out-of-bounds Read
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12727
4.3
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2025-12755
4.0
0%
Feb 17
Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Affected: SC2: v3.2.0 through 3.2.21; CD:  v3.3.0 through 3.8.1; LTS: v2.0.0 through 2.0.29
Showing 17