CVE-2025-14456
Awaiting Analysis Awaiting Analysis - Queue
Authentication Bypass in IBM MQ Appliance 9.4.x Series

Publication date: 2026-03-03

Last updated on: 2026-03-05

Assigner: IBM Corporation

Description
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-03
Last Modified
2026-03-05
Generated
2026-06-16
AI Q&A
2026-03-03
EPSS Evaluated
2026-06-15
NVD
CVE-2025-14456
EUVD
EUVD-2025-208262
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ibm mq_appliance From 9.4.4.0 (inc) to 9.4.5.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects IBM MQ Appliance versions 9.4 CD through 9.4.4.0 to 9.4.4.1. It involves the use of weaker than expected cryptographic algorithms, classified under CWE-327 (Use of a Broken or Risky Cryptographic Algorithm). Because of this weakness, an attacker could potentially decrypt highly sensitive information transmitted or stored by the appliance.

Impact Analysis

The impact of this vulnerability is primarily on confidentiality. An attacker exploiting this issue could decrypt highly sensitive information, potentially leading to data exposure. The CVSS v3.1 score is 5.9, indicating a moderate severity with a network attack vector, high attack complexity, no privileges or user interaction required, and no impact on integrity or availability.

Compliance Impact

I don't know

Detection Guidance

There are no specific detection commands or methods provided for identifying this vulnerability on your network or system.

Mitigation Strategies

The only effective mitigation is to promptly apply the recommended firmware update to IBM MQ Appliance version 9.4.5.0 or later.

There are no known workarounds or alternative mitigations other than updating the firmware.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-14456. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart