Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-11829: IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset

26
Routine
MEDIUM 6.5UPGRADEDOWNGRADE

CVE-2026-11829 is a medium-severity flaw (CVSS 6.5) affecting mq operator, supplied mq advanced container images. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score6.5 (Medium)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.2% (top 86%)
CISA exploited listNo
WeaknessCWE-120
Published2026-10-19
Last modified2026-10-23
Publisher (CNA): IBM Corporation · Vendor: ibm

Am I affected?

Timeline

ibm mq operator UPGRADE
Affected: >= 2.0.0 and <= 2.0.29 · >= 3.2.0 and <= 3.2.29 · 3.3.0 · 3.4.0 · 3.4.1 · 3.5.0 · 3.5.1 · 3.5.2
Fixed in: newer than 3.2.29
Safe to downgrade to: a release before 2.0.0
1. Check installed version
apt-cache policy mq-operator || rpm -q mq-operator || mq-operator --version
2. UPGRADE to newer than 3.2.29 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade mq-operator
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade mq-operator
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2.0.0 (Debian / Ubuntu)
apt-cache madison mq-operator sudo apt install mq-operator=<VERSION_BEFORE_2.0.0> sudo apt-mark hold mq-operator
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list mq-operator sudo dnf downgrade mq-operator-<VERSION_BEFORE_2.0.0> sudo dnf versionlock add mq-operator
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ibm supplied mq advanced container images DOWNGRADE
Affected: 9.4.1.0 r1 · 9.4.1.0 r2 · 9.4.1.1 r1 · 9.4.2.0 r1 · 9.4.2.0 r2 · 9.4.2.1 r1 · 9.4.2.1 r2 · 9.4.3.0 r1
Fixed in: no fixed release known
Safe to downgrade to: a release before 9.3.0.0
1. Check installed version
apt-cache policy supplied-mq-advanced-container-images || rpm -q supplied-mq-advanced-container-images || supplied-mq-advanced-container-images --version
2. No fixed release: DOWNGRADE to a release before 9.3.0.0 (Debian / Ubuntu)
apt-cache madison supplied-mq-advanced-container-images sudo apt install supplied-mq-advanced-container-images=<VERSION_BEFORE_9.3.0.0> sudo apt-mark hold supplied-mq-advanced-container-images
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list supplied-mq-advanced-container-images sudo dnf downgrade supplied-mq-advanced-container-images-<VERSION_BEFORE_9.3.0.0> sudo dnf versionlock add supplied-mq-advanced-container-images
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Related CVEs

References

← Back to latest CVEs