MO
Product
MQ Operator
28
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 3High 8Medium 16Low 1
Watch
Add MQ Operator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12665 | 9.8 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-36041 | 9.8 | Jun 15 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through… Affected: 2.0.0 through 2.0.29; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.12; +7 more |
| CVE-2024-39742 | 9.8 | Jul 8 | IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability Affected: 2.0.0 before 2.0.24; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 before 3.2.2; +2 more |
| CVE-2026-10572 | 8.8 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-10574 | 8.8 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-10743 | 8.8 | Oct 19 | IBM MQ Race Condition Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12148 | 8.8 | Oct 19 | IBM MQ Deserialization of Untrusted Data Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2024-40681 | 8.8 | Sep 7 | IBM MQ security bypass Affected: 2.0.0 through 2.0.25; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.3; +2 more |
| CVE-2024-27256 | 7.5 | Jan 27 | IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected… Affected: 2.0.0 through 2.0.22; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.0.0; +1 more |
| CVE-2024-39743 | 7.5 | Jul 8 | IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation Affected: 2.0.0 before 2.0.24; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 before 3.2.2; +2 more |
| CVE-2024-27255 | 7.5 | Mar 3 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected… Affected: 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.7; 2.0.0; 2.0.18; 3.0.0; +1 more |
| CVE-2026-11829 | 6.5 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12155 | 6.5 | Oct 19 | IBM MQ Deserialization of Untrusted Data Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12343 | 6.5 | Oct 19 | IBM MQ Denial of Service Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12350 | 6.5 | Oct 19 | IBM MQ Deserialization of Untrusted Data Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12670 | 6.5 | Oct 19 | IBM MQ Denial of Service Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-36005 | 6.5 | Jul 24 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13… Affected: 2.0.0 through 2.0.29; 3.2.0 through 3.2.13; 3.5.1 through 3.6.0; 3.3.0; 3.4.0; 3.4.1; +1 more |
| CVE-2025-27365 | 6.5 | May 1 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client… Affected: 2.0.0 through 2.0.29; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.10; +7 more |
| CVE-2025-1333 | 6.5 | May 1 | IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator… Affected: 2.0.0 through 2.0.29; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.10; +7 more |
| CVE-2026-11828 | 5.9 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2025-33013 | 5.5 | Jul 24 | IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13… Affected: 2.0.0 through 2.0.29; 3.2.0 through 3.2.13; 3.5.1 through 3.6.0; 3.3.0; 3.4.0; 3.4.1; +1 more |
| CVE-2024-40680 | 5.5 | Sep 7 | IBM MQ denial of service Affected: 2.0.26; 3.2.4 |
| CVE-2023-47745 | 5.5 | Mar 3 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user… Affected: 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.7; 2.0.0; 2.0.18; 3.0.0; +1 more |
| CVE-2026-11831 | 5.4 | Oct 19 | IBM MQ Heap-based Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-2607 | 5.1 | May 27 | Multiple vulnerabilities in IBM MQ Operator and Queue manager container images Affected: SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29 |
| CVE-2026-12669 | 4.3 | Oct 19 | IBM MQ Out-of-bounds Read Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12727 | 4.3 | Oct 19 | IBM MQ Buffer Overflow Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
| CVE-2026-12660 | 2.7 | Oct 19 | IBM MQ Path Traversal Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more |
Showing 28