Back Sploitus

CVE-2026

Sploitus • October 19, 2026

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High-Risk CVE-2026-10574 Discovered in IBM MQ IBM MQ has a vulnerability (CVE-2026-10574) that allows authenticated attackers to cause denial of service or execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties. This vulnerability is rated as high risk (CVSS 8.8) and requires expedited remediation for exposed deployments. Organizations running MQ brokers in container platforms or enterprise integration environments are particularly affected, especially where clients or partner networks can reach broker interfaces. The attack requires network access and a low-privilege account to submit messages, with no victim action needed. The scope of impact includes potential disruption of message flows and unauthorized data alterations. Current exploitation activity is uncertain, as no proof-of-concept or active exploitation has been reported. Organizations are advised to monitor for unusual MQPUT/MQPUT1 activity and review their security configurations. 2 sources 65

Extracted Entities

CVE-2026

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Platforms (1)