CVE-2026-11727

HighCVSS 8.1/10Last modified Sep 22, 2026

Description

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when requesting AMS policy data.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
IBMMQ for HPE NonStop>= 8.1.0, <= 8.1.0.40

References

Timeline

Published
Sep 18, 2026
Last modified
Sep 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-117288.1IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 throughCVE-2026-117298.5IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 throughCVE-2026-11739.8A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the componCVE-2026-117305.4Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network accessCVE-2026-117318.8An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to thCVE-2026-117328.8An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a neCVE-2026-117334.9A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of CVE-2026-117342.7A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become tempoCVE-2026-1173417.7In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation isCVE-2026-1173467.5Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limitCVE-2026-1173495.3Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.CVE-2026-117354.9A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modi
CVE-2026-11727: High severity, CVSS 8.1 | Vulnix