{"id":"CVE-2026-18142","title":"IBM MQ is affected by a denial of service vulnerability","summary":"IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of servic…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cvssSource":"cna","cwe":["CWE-190"],"vendor":"IBM","product":"MQ","affected":["MQ >= 9.2.0.0 <= 9.2.0.44","MQ >= 9.3.0.0 <= 9.3.0.42","MQ >= 9.4.0.0 <= 9.4.0.26","MQ >= 9.4.0.0 <= 9.4.5.1","MQ >= 10.0.0.0 <= 10.0.0.5"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T20:21:55.509Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-18142","references":[{"url":"https://www.ibm.com/support/pages/node/7294663"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T21:36:00.547Z","epss":0.00427,"epssPercentile":0.37201,"slug":"CVE-2026-18142","body":"## Overview\n\nIBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.\n\n## Affected\n\n- `MQ >= 9.2.0.0 <= 9.2.0.44`\n- `MQ >= 9.3.0.0 <= 9.3.0.42`\n- `MQ >= 9.4.0.0 <= 9.4.0.26`\n- `MQ >= 9.4.0.0 <= 9.4.5.1`\n- `MQ >= 10.0.0.0 <= 10.0.0.5`\n\n## Remediation\n\nThis issue was addressed under Known Issue DT500561.\n\n\n\nIBM MQ version 9.2 LTS\n\n\n\n Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts \n\n\n\nIBM MQ version 9.3 LTS\n\n\n\n Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts \n\n\n\nIBM MQ version 9.4 LTS\n\n\n\n Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94 \n\n\n\nIBM MQ version 10.0.LTS\n\n\n\n Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100 \n\n\n\nIBM MQ version 9.4 CD and 10.0 CD\n\n\n\n Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}