Login Request a demo
MQ
Product
MQ
by IBM · last CVE Oct 19, 2026
74
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities74In the news0Timeline
Severity mix
Critical 4High 35Medium 34Low 1
Severity
All severities74Critical4High35Medium34Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MQ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-10027
9.8
1%
Sep 18
IBM MQ queue manager is vulnerable to unauthenticated remote code execution
Affected: 9.1.0.0 through 9.1.0.37 LTS; 9.2.0.0 through 9.2.0.43 LTS; 9.3.0.0 through 9.3.0.41 LTS; 9.3.0.0 through 9.3.5.1 CD; 9.4.0.0 through 9.4.0.25 LTS; 9.4.0.0 through 9.4.5.1 CD; +1 more
CVE-2026-12351
9.8
1%
Sep 15
IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection
Affected: 9.3.0.0 through 9.3.0.41 LTS; 9.3.0.0 through 9.3.5.1 CD; 9.4.0.0 through 9.4.0.25 LTS; 9.4.0.0 through 9.4.5.1 LTS; 10.0.0.0
CVE-2020-4682
9.8
8%
Jan 28
IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data
Affected: 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; +30 more
CVE-2022-22489
9.1
2%
Aug 19
IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Affected: 8.0.0.0; 9.0.0.0; 9.1.0; 9.1.0.0; 9.2.0; 9.2.0
Showing 4