Skip to content
High-Risk CVE-2026-10572 Discovered in IBM MQ

High-Risk CVE-2026-10572 Discovered in IBM MQ

First seen 19 Oct 2026, 19:51 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 20:51 UTC
  • •CVE-2026-10572 allows code execution or denial of service in IBM MQ.
  • •The vulnerability affects containerized queue managers and requires low-privilege authenticated access.
  • •No active exploitation has been reported, but immediate patching is advised.

A new vulnerability, CVE-2026-10572, has been identified in IBM MQ, allowing authenticated attackers to potentially execute arbitrary code or cause a denial of service via a heap buffer overflow during MQPUT operations with malformed message options. This flaw is classified as high severity with a CVSS score of 8.8. Affected systems include containerized queue managers and clusters managed by an operator, especially those exposed to untrusted networks. Attackers need network access and a low-privilege authenticated account to exploit this vulnerability. While the risk is significant, there is currently no evidence of active exploitation or a proof of concept available. IBM has released fixed versions, and users are advised to upgrade their systems promptly. Until patched, restricting network access to trusted clients is recommended.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
CVE-2026-10572 published
IBM MQ vulnerability disclosed, allowing potential code execution or denial of service.
Redpacketsecurity
2026-10-19
CVE-2026-10572 reported by Sploitus
Sploitus confirms the existence of CVE-2026-10572, detailing the same vulnerabilities and risks.
Sploitus

More articles in this cluster (2)

Following this threat?

Track CVE-2026-10572 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 4

Common questions

What systems are affected by CVE-2026-10572?
Containerized queue managers and clusters managed by an operator, particularly those exposed to untrusted networks.
Is there any evidence of active exploitation?
No, there is currently no evidence of active exploitation reported for this vulnerability.
What should I do to mitigate this risk?
Upgrade to the latest fixed releases of IBM MQ and restrict network access to trusted clients until patched.