Skip to content
High-Risk CVE-2026-10574 Discovered in IBM MQ

High-Risk CVE-2026-10574 Discovered in IBM MQ

First seen 19 Oct 2026, 19:51 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 20:51 UTC
  • •CVE-2026-10574 allows denial of service and arbitrary code execution in IBM MQ.
  • •High-risk rating (CVSS 8.8) necessitates urgent remediation for affected deployments.
  • •Organizations using MQ brokers in accessible environments are most vulnerable.

IBM MQ has a vulnerability (CVE-2026-10574) that allows authenticated attackers to cause denial of service or execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties. This vulnerability is rated as high risk (CVSS 8.8) and requires expedited remediation for exposed deployments. Organizations running MQ brokers in container platforms or enterprise integration environments are particularly affected, especially where clients or partner networks can reach broker interfaces. The attack requires network access and a low-privilege account to submit messages, with no victim action needed. The scope of impact includes potential disruption of message flows and unauthorized data alterations. Current exploitation activity is uncertain, as no proof-of-concept or active exploitation has been reported. Organizations are advised to monitor for unusual MQPUT/MQPUT1 activity and review their security configurations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
CVE-2026-10574 published
IBM disclosed a high-risk vulnerability in IBM MQ affecting message processing operations.
Redpacketsecurity
2026-10-19
CVE-2026-10574 reported by Sploitus
Sploitus confirmed the existence of the vulnerability and its potential impact on IBM MQ.
Sploitus

More articles in this cluster (2)

Following this threat?

Track CVE-2026-10574 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What systems are affected by CVE-2026-10574?
IBM MQ systems that process MQPUT or MQPUT1 operations with malformed message handle properties are affected.
How urgent is the remediation for this vulnerability?
The vulnerability is rated high risk (CVSS 8.8), indicating that remediation should be expedited.
What actions should organizations take now?
Organizations should identify affected deployments, restrict broker network access, and upgrade to IBM's fixed supported releases.