PT-2026-137167

CVE-2026-13271

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper restriction of XML external entity references in command queue processing.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-611: Improper Restriction of XML External Entity Reference
Related identifiers
CVE-2026-13271
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com