SEPTEMBER 24, 2026
Live Feed
Back to database
Case File

CVE-2026-10853

HIGH · CVSS 7.5 EPSS 0.36%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-09-24

CyberRota Analysis

AI-Generated

IBM MQ is vulnerable to a denial of service or potential arbitrary code execution due to improper validation of cluster command message lengths, which can be exploited by authenticated attackers with cluster access. Organizations using IBM MQ should prioritize patching this vulnerability to mitigate the risk of service disruption and unauthorized code execution. Immediate action is recommended for environments where IBM MQ is deployed, particularly those with cluster configurations.

CVE
CVE-2026-10853
Severity
HIGH
CVSS
7.5
EPSS
0.36%

Original NVD Description

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths.

Related CVEs

Other vulnerabilities affecting the same vendor(s)