{"id":"CVE-2026-14511","title":"IBM MQ Denial of Service","summary":"IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-770"],"vendor":"IBM","product":"MQ","affected":["MQ >= 9.4.5.0 <= 9.4.5.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-20T15:10:12.968219Z"},"published":"2026-10-19","updated":"2026-10-20","sourceUpdated":"2026-10-20T16:11:08.437Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-14511","references":[{"url":"https://www.ibm.com/support/pages/node/7290859"}],"tags":["cve.org"],"epss":0.00328,"epssPercentile":0.25812,"ingestedAt":"2026-10-19T17:33:42.460Z","slug":"CVE-2026-14511","body":"## Overview\n\nIBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.\n\n## Affected\n\n- `MQ >= 9.4.5.0 <= 9.4.5.1`\n\n## Remediation\n\nThis issue was addressed under known issue DT500555\n\n\n\nIBM MQ version 9.4 CD\n\n\n\n Upgrade to IBM MQ version 10.0.0.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}