CVE-2026-14252Medium· 6.2▾ SunlitIBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentially sensitive information in log files that could be rea…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentially sensitive information in log files that could be read by a local user.
MQ >= 9.2.0.0 <= 9.2.0.44MQ >= 9.3.0.0 <= 9.3.0.42MQ >= 9.4.0.0 <= 9.4.0.26MQ >= 9.4.0.0 <= 9.4.5.1MQ >= 10.0.0.0 <= 10.0.0.5This issue was addressed under Known Issue DT473111.
IBM MQ version 9.2 LTS
Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts
IBM MQ version 9.3 LTS
Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts
IBM MQ version 9.4 LTS
Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94
IBM MQ version 10.0.LTS
Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100
IBM MQ version 9.4 CD and 10.0 CD
Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-17322High· 7.1Multiple Vulnerabilities in IBM API Connect
CVE-2026-10859High· 7.5IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
CVE-2026-11376High· 8.8IBM MQ is affected by a denial of service vulnerability
CVE-2026-12356High· 7.5IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
CVE-2026-11724High· 8.5IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
CVE-2026-12550Medium· 5.4IBM MQ is affected by a denial of service vulnerability