IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks.
"}],"value":"IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-285","description":"CWE-285 Improper Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-18T15:47:15.484Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7284894"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"This issue was addressed under Known Issue DT472093
IBM MQ version 9.3 LTS
Apply cumulative security update 9.3.0.42
IBM MQ version 9.4 LTS
Apply cumulative security update 9.4.0.26
IBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0
"}],"value":"This issue was addressed under Known Issue DT472093\nIBM MQ version 9.3 LTS\nApply cumulative security update 9.3.0.42\nIBM MQ version 9.4 LTS\nApply cumulative security update 9.4.0.26\nIBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0\nUpgrade to IBM MQ version 10.0.0.5"}],"title":"IBM MQ Console is vulnerable to privilege escalation"}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2026-10030","datePublished":"2026-09-18T15:47:15.484Z","dateReserved":"2026-05-28T18:33:26.331Z","dateUpdated":"2026-09-18T16:30:47.384Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-18 16:17:04","lastModifiedDate":"2026-09-18 18:17:47","problem_types":["CWE-285","CWE-285 CWE-285 Improper Authorization"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-18T16:22:46.518576Z","id":"CVE-2026-10030","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"10030","Ordinal":"1","Title":"IBM MQ Console is vulnerable to privilege escalation","CVE":"CVE-2026-10030","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"10030","Ordinal":"1","NoteData":"IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks.","Type":"Description","Title":"IBM MQ Console is vulnerable to privilege escalation"}]}}}