IBM MQ .NET client is vulnerable to remote code execution
Summary
| CVE | CVE-2026-11728 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-15 18:17:12 UTC |
| Updated | 2026-09-16 04:17:52 UTC |
| Description | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack. |
Risk And Classification
Primary CVSS: v3.1 8.1 HIGH from [email protected]
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.005880000 probability, percentile 0.465320000 (date 2026-09-16)
Problem Types: CWE-787 | CWE-787 CWE-787 Out-of-bounds Write
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 8.1 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 8.1 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
HighPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | IBM | MQ | affected 9.1.0.0 9.1.0.37 LTS semver | Not specified |
| CNA | IBM | MQ | affected 9.2.0.0 9.2.0.43 LTS semver | Not specified |
| CNA | IBM | MQ | affected 9.3.0.0 9.3.0.41 LTS semver | Not specified |
| CNA | IBM | MQ | affected 9.3.0.0 9.3.5.1 CD semver | Not specified |
| CNA | IBM | MQ | affected 9.4.0.0 9.4.0.25 LTS semver | Not specified |
| CNA | IBM | MQ | affected 9.4.0.0 9.4.5.1 CD semver | Not specified |
| CNA | IBM | MQ | affected 10.0.0.0 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.ibm.com/support/pages/node/7284943 | [email protected] | www.ibm.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
Solutions
CNA: This issue was addressed under Known Issue DT473417 IBM MQ version 9.1 LTS Apply cumulative security update 9.1.0.38 IBM MQ version 9.2 LTS Apply cumulative security update 9.2.0.44 IBM MQ version 9.3 LTS Apply cumulative security update 9.3.0.42 IBM MQ version 9.4 LTS Apply cumulative security update 9.4.0.26 IBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0 Upgrade to IBM MQ version 10.0.0.5
There are currently no legacy QID mappings associated with this CVE.