CVE-2026-11376

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS IBM MQ versions 9.3.0.0 through 9.3.0.42 LTS IBM MQ versions 9.4.0.0 through 9.4.0.26 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ versions 10.0.0.0 through 10.0.0.5 LTS and CD

Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This occurs due to an integer overflow—a condition where an arithmetic operation results in a value too large for the allocated memory space—when the system processes subscription requests containing crafted buffer size values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.