PT-2026-137132

CVE-2026-10859

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code on consumer applications due to insecure deserialization of ObjectMessage payloads.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2026-10859
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com