Analysis and contextual insights are available on OpenCVE Cloud.
Vendor Solution
This issue was addressed under Known Issue DT500561. IBM MQ version 9.2 LTS Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts IBM MQ version 9.3 LTS Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts IBM MQ version 9.4 LTS Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94 IBM MQ version 10.0.LTS Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100 IBM MQ version 9.4 CD and 10.0 CD Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7294663 |
|
Tue, 10 Nov 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:* cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:* |
Wed, 04 Nov 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow. | |
| Title | IBM MQ is affected by a denial of service vulnerability | |
| First Time appeared |
Ibm
Ibm mq |
|
| Weaknesses | CWE-190 | |
| CPEs | cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm mq |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-11-09T20:50:32.680Z
Reserved: 2026-07-28T18:51:59.464Z
Link: CVE-2026-18142
No data.
Status : Analyzed
Published: 2026-11-04T21:18:13.187
Modified: 2026-11-10T19:42:17.937
Link: CVE-2026-18142
No data.
OpenCVE Enrichment
Updated: 2026-11-04T22:15:15Z