high
advisory
IBM MQ: Integer overflow vulnerability (CVE-2026-18142)
IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD are vulnerable to an integer overflow that could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption.
CVE search metadata
CVE search record: CVE-2026-18142. Severity: high. CVSS: 7.1. KEV: no. Product: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, IBM MQ 9.3.0.0 through 9.3.0.42 LTS, IBM MQ 9.4.0.0 through 9.4.0.26 LTS, IBM MQ 9.4.0.0 through 9.4.5.1 CD, IBM MQ 10.0.0.0 through 10.0.0.5 LTS and CD. Brief: IBM MQ: Integer overflow vulnerability (CVE-2026-18142). Brief link: https://feed.craftedsignal.io/briefs/2026-11-ibm-mq-integer-overflow/
Triage facts
Revision 1- Applicability
- IBM MQ 9.2.0.0 through 9.2.0.44 LTS, IBM MQ 9.3.0.0 through 9.3.0.42 LTS +3
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 00:07 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance