CVE-2026-13293

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ version 10.0.0.0

Description A remote authenticated attacker can execute arbitrary code on the system. This is possible due to the deserialization of untrusted data, a process where malicious data is converted back into an object, allowing the execution of unauthorized commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.