CVE-2026-13287

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ version 10.0.0.0

Description An XML external entity injection (XXE) occurs when processing XML data. This allows a remote attacker to expose sensitive information or consume memory resources. XXE is a type of attack that occurs when an XML parser improperly handles external entity references within an XML document.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.