CVE-2026-10743

HighCVSS 8.8/10Last modified Oct 23, 2026

Description

IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1223

Affected software

No affected versions have been published.

Timeline

Published: Oct 19, 2026
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-1074305.4Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allow CVE-2026-1074317.5Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Secu CVE-2026-1074325.4Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Con CVE-2026-1074336.5Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access CVE-2026-1074345.4Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.CVE-2026-1074357.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-te CVE-2026-1074368.8Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affec CVE-2026-1074376.2GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered th CVE-2026-107447.5IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate pri CVE-2026-1074444.3A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories CVE-2026-1074455.4A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remot CVE-2026-1074466.8containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for