CVE-2026-11728

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ version 10.0.0.0

Description A heap buffer overflow in the .NET client can occur when receiving messages from a malicious queue manager or during a man-in-the-middle attack. This issue may allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.