Known vulnerabilities in IBM MQ Operator

Software CPE: cpe:2.3:a:ibm_corporation:ibm_mq_operator:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 19
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM MQ Operator IBM MQ Operator is affected by 293 known vulnerabilities: 2 critical, 33 high, 186 medium, 72 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134270 - Use After Free
CVE-2026-45447
CWE-416 High
No
No
3.2.26 SC2, 4.0.1 SC2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 45 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383
CWE-122 Low
No
No
3.2.26 SC2, 4.0.1 SC2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 33 more
#VU134277 - Out-of-bounds read
CVE-2026-9076
CWE-125 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 34 more
#VU134281 - NULL Pointer Dereference
CVE-2026-42766
CWE-476 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 35 more
#VU127606 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42035
CWE-113 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026061912
SB2026061913
and 15 more
#VU127602 - Allocation of Resources Without Limits or Throttling
CVE-2026-42034
CWE-770 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU127601 - Allocation of Resources Without Limits or Throttling
CVE-2026-42036
CWE-770 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU127600 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-42037
CWE-93 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU127599 - Improper Access Control
CVE-2026-42038
CWE-284 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026061992
SB2026061993
and 9 more
#VU127598 - Uncontrolled Recursion
CVE-2026-42039
CWE-674 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026061954
SB2026062221
and 6 more
#VU127597 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42040
CWE-626 Low
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU127596 - Permissive List of Allowed Inputs
CVE-2026-42042
CWE-183 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026062221
SB2026062508
and 5 more
#VU127595 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42041
CWE-1321 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026061954
SB2026062221
and 8 more
#VU127594 - Permissive List of Allowed Inputs
CVE-2026-42043
CWE-183 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424169
SB2026061954
SB2026061999
and 10 more
#VU127593 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42044
CWE-1321 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424168
SB2026062221
SB2026062508
and 8 more
#VU127592 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42264
CWE-1321 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 24.04.2026 SB20260424168
SB2026061999
SB20260619101
and 9 more
#VU125981 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40895
CWE-200 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 14.04.2026 SB20260414106
SB2026062434
SB20260625284
and 13 more
#VU125750 - Server-Side Request Forgery (SSRF)
CVE-2025-62718
CWE-918 High
No
No
3.2.26 SC2, 4.0.1 SC2 10.04.2026 SB2026041001
SB2026050419
SB2026050715
and 29 more
#VU121181 - Stack-based buffer overflow
CVE-2025-13151
CWE-121 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 12.01.2026 SB2026011266
SB2026011267
SB2026011354
and 18 more
#VU89430 - Heap-based Buffer Overflow
CVE-2024-34459
CWE-122 Medium
No
No
3.2.26 SC2, 4.0.1 SC2 14.05.2024 SB2024051432
SB2024051433
SB2024051631
and 31 more


Showing elements 1 - 20 out of 293