CVE-2026-11828
Received Received - Intake

IBM MQ Remote DoS via Queue Name Length Validation

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: IBM Corporation

Description
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-11828
EUVD
EUVD-2026-104473

Affected Vendors & Products

Showing 89 associated CPEs
Vendor Product Version / Range
IBM MQ Operator 3.2.0
IBM MQ Operator 3.3.0
IBM MQ Operator 3.4.1
IBM MQ Operator 3.5.0
IBM MQ Operator 3.5.1
IBM MQ Operator 3.6.0
IBM MQ Operator 3.7.0
IBM MQ Operator 3.8.0
IBM MQ Operator 3.8.1
IBM MQ Operator 3.9.0
IBM MQ Operator 3.9.1
IBM MQ Operator 3.9.2
IBM MQ Operator 4.0.0
IBM MQ Operator 4.0.1
IBM MQ Operator 4.0.2
IBM MQ Operator 4.0.3
IBM MQ Operator 4.0.4
IBM MQ Operator 2.0.0
IBM MQ Advanced container images 9.4.0.6-r1
IBM MQ Advanced container images 9.4.0.6-r2
IBM MQ Advanced container images 9.4.0.7-r1
IBM MQ Advanced container images 9.4.0.10-r1
IBM MQ Advanced container images 9.4.0.10-r2
IBM MQ Advanced container images 9.4.0.11-r1
IBM MQ Advanced container images 9.4.0.11-r2
IBM MQ Advanced container images 9.4.0.11-r3
IBM MQ Advanced container images 9.4.0.12-r1
IBM MQ Advanced container images 9.4.0.15-r1
IBM MQ Advanced container images 9.4.0.16-r1
IBM MQ Advanced container images 9.4.0.16-r2
IBM MQ Advanced container images 9.4.0.17-r1
IBM MQ Advanced container images 9.4.0.17-r2
IBM MQ Advanced container images 9.4.0.20-r1
IBM MQ Advanced container images 9.4.0.21-r1
IBM MQ Advanced container images 9.4.0.21-r2
IBM MQ Advanced container images 9.4.0.25-r1
IBM MQ Advanced container images 9.4.0.26-r1
IBM MQ Advanced container images 9.4.1.0-r1
IBM MQ Advanced container images 9.4.1.0-r2
IBM MQ Advanced container images 9.4.1.1-r1
IBM MQ Advanced container images 9.4.2.0-r1
IBM MQ Advanced container images 9.4.2.0-r2
IBM MQ Advanced container images 9.4.2.1-r1
IBM MQ Advanced container images 9.4.2.1-r2
IBM MQ Advanced container images 9.4.3.0-r1
IBM MQ Advanced container images 9.4.3.0-r2
IBM MQ Advanced container images 9.4.3.1-r1
IBM MQ Advanced container images 9.4.4.0-r1
IBM MQ Advanced container images 9.4.4.1-r1
IBM MQ Advanced container images 9.4.5.0-r1
IBM MQ Advanced container images 9.4.5.0-r2
IBM MQ Advanced container images 9.4.5.1-r1
IBM MQ Advanced container images 10.0.0.0-r1
IBM MQ Advanced container images 10.0.0.5-r1
IBM MQ Advanced container images 9.3.0.0-r1
IBM MQ Advanced container images 9.3.0.0-r2
IBM MQ Advanced container images 9.3.0.0-r3
IBM MQ Advanced container images 9.3.0.1-r1
IBM MQ Advanced container images 9.3.0.1-r2
IBM MQ Advanced container images 9.3.0.1-r3
IBM MQ Advanced container images 9.3.0.1-r4
IBM MQ Advanced container images 9.3.0.3-r1
IBM MQ Advanced container images 9.3.0.4-r1
IBM MQ Advanced container images 9.3.0.4-r2
IBM MQ Advanced container images 9.3.0.5-r1
IBM MQ Advanced container images 9.3.0.5-r2
IBM MQ Advanced container images 9.3.0.5-r3
IBM MQ Advanced container images 9.3.0.6-r1
IBM MQ Advanced container images 9.3.0.10-r1
IBM MQ Advanced container images 9.3.0.10-r2
IBM MQ Advanced container images 9.3.0.11-r1
IBM MQ Advanced container images 9.3.0.11-r2
IBM MQ Advanced container images 9.3.0.15-r1
IBM MQ Advanced container images 9.3.0.16-r1
IBM MQ Advanced container images 9.3.0.16-r2
IBM MQ Advanced container images 9.3.0.17-r1
IBM MQ Advanced container images 9.3.0.17-r2
IBM MQ Advanced container images 9.3.0.17-r3
IBM MQ Advanced container images 9.3.0.20-r1
IBM MQ Advanced container images 9.3.0.20-r2
IBM MQ Advanced container images 9.3.0.21-r1
IBM MQ Advanced container images 9.3.0.21-r2
IBM MQ Advanced container images 9.3.0.21-r3
IBM MQ Advanced container images 9.3.0.25-r1
IBM MQ Advanced container images 9.4.0.0-r1
IBM MQ Advanced container images 9.4.0.0-r2
IBM MQ Advanced container images 9.4.0.0-r3
IBM MQ Advanced container images 9.4.0.5-r1
IBM MQ Advanced container images 9.4.0.5-r2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in IBM MQ allows a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption. The issue arises due to improper validation of queue name length values.

Impact Analysis

If exploited, this vulnerability could disrupt client applications that rely on asynchronous message consumption, leading to service interruptions and potential data processing delays.

Mitigation Strategies

Enable encryption for all IBM MQ channels to prevent man-in-the-middle attacks and ensure queue name length values are properly validated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-11828. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart