CVE-2026-11725

HighCVSS 8.8/10Last modified Sep 22, 2026

Description

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
IBM	MQ	>= 9.1.0.0, <= 9.1.0.37 LTS; >= 9.2.0.0, <= 9.2.0.43 LTS; >= 9.3.0.0, <= 9.3.0.41 LTS; >= 9.3.0.0, <= 9.3.5.1 CD; >= 9.4.0.0, <= 9.4.0.25 LTS; >= 9.4.0.0, <= 9.4.5.1 CD; 10.0.0.0

References

https://www.ibm.com/support/pages/node/7284944

Timeline

Published: Sep 18, 2026
Last modified: Sep 22, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-117268.1IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of ser CVE-2026-117278.1IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially exec CVE-2026-117288.1IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through CVE-2026-117298.5IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through CVE-2026-11739.8A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the compon CVE-2026-117305.4Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access CVE-2026-117318.8An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to th CVE-2026-117328.8An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a ne CVE-2026-117334.9A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of CVE-2026-117342.7A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become tempo CVE-2026-1173417.7In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is CVE-2026-1173467.5Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit