PatchTheCVEmq operator vulnerabilities and fixes
Recent CVEs affecting mq operator, with upgrade or downgrade steps. 15 tracked.
mq operator has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 15. Most recent: 2026-10-19. Highest priority: CVE-2026-12665 (score 37/100).
- CVE-2026-12155 MEDIUM 6.5 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica
- CVE-2026-12148 HIGH 7.5 UPGRADE DOWNGRADE IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi
- CVE-2026-11831 MEDIUM 5.4 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info
- CVE-2026-11829 MEDIUM 6.5 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset
- CVE-2026-12343 MEDIUM 6.5 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m
- CVE-2026-12350 MEDIUM 6.5 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async
- CVE-2026-12660 LOW 2.7 UPGRADE DOWNGRADE IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory du
- CVE-2026-12665 HIGH 8.1 UPGRADE DOWNGRADE IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing
- CVE-2026-12669 LOW 3.1 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed comp
- CVE-2026-12670 MEDIUM 5.3 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message
- CVE-2026-12727 MEDIUM 4.3 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffe
- CVE-2026-10572 HIGH 8.8 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod
- CVE-2026-10574 HIGH 8.8 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod
- CVE-2026-10743 HIGH 8.8 UPGRADE DOWNGRADE IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va
- CVE-2026-11828 MEDIUM 5.9 UPGRADE DOWNGRADE IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha
FAQ
How do I fix mq operator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mq operator being exploited right now?
None of the tracked mq operator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mq operator CVE should I patch first?
CVE-2026-12665 currently ranks highest (37/100): IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing .