Login Request a demo
MO
Product
MQ Operator
by IBM · last CVE Oct 19, 2026
28
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Vulnerabilities28In the news0Timeline
Severity mix
Critical 3High 8Medium 16Low 1
Severity
All severities28Critical3High8Medium16Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ Operator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-11829
6.5
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12155
6.5
0%
Oct 19
IBM MQ Deserialization of Untrusted Data
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12343
6.5
0%
Oct 19
IBM MQ Denial of Service
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12350
6.5
0%
Oct 19
IBM MQ Deserialization of Untrusted Data
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12670
6.5
0%
Oct 19
IBM MQ Denial of Service
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2025-36005
6.5
0%
Jul 24
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13…
Affected: 2.0.0 through 2.0.29; 3.2.0 through 3.2.13; 3.5.1 through 3.6.0; 3.3.0; 3.4.0; 3.4.1; +1 more
CVE-2025-27365
6.5
0%
May 1
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10  Client…
Affected: 2.0.0 through 2.0.29; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.10; +7 more
CVE-2025-1333
6.5
0%
May 1
IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator…
Affected: 2.0.0 through 2.0.29; 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.8; 3.1.0 through 3.1.3; 3.2.0 through 3.2.10; +7 more
CVE-2026-11828
5.9
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2025-33013
5.5
0%
Jul 24
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13…
Affected: 2.0.0 through 2.0.29; 3.2.0 through 3.2.13; 3.5.1 through 3.6.0; 3.3.0; 3.4.0; 3.4.1; +1 more
CVE-2024-40680
5.5
0%
Sep 7
IBM MQ denial of service
Affected: 2.0.26; 3.2.4
CVE-2023-47745
5.5
0%
Mar 3
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user…
Affected: 2.2.0 through 2.2.2; 2.3.0 through 2.3.3; 2.4.0 through 2.4.7; 2.0.0; 2.0.18; 3.0.0; +1 more
CVE-2026-11831
5.4
0%
Oct 19
IBM MQ Heap-based Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-2607
5.1
0%
May 27
Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Affected: SC2: v3.2.0 through 3.2.23CD:  v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29
CVE-2026-12669
4.3
0%
Oct 19
IBM MQ Out-of-bounds Read
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
CVE-2026-12727
4.3
0%
Oct 19
IBM MQ Buffer Overflow
Affected: 3.2.0 through 3.2.29; 3.3.0 before 3.4.0; 3.4.1; 3.5.0; 3.5.1 through 3.5.3; 3.6.0 through 3.6.4; +12 more
Showing 16