{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ibm-mq-9.4.0.0-through-9.4.5.1-cd/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.5,"id":"CVE-2026-11724"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["IBM MQ 9.2.0.0 through 9.2.0.44 LTS","IBM MQ 9.3.0.0 through 9.3.0.42 LTS","IBM MQ 9.4.0.0 through 9.4.0.26 LTS","IBM MQ 9.4.0.0 through 9.4.5.1 CD","IBM MQ 10.0.0.0 through 10.0.0.5 LTS and CD"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["IBM"],"content_html":"\u003cp\u003eCVE-2026-11724 affects IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. The vulnerability permits an authenticated attacker to execute arbitrary code on an MFT agent host by exploiting improper metadata validation during script execution.\u003c/p\u003e\n","date_modified":"2026-11-04T22:07:22Z","date_published":"2026-11-04T22:07:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ibm-mq-rce/","summary":"IBM MQ Managed File Transfer (MFT) contains a vulnerability that could allow an authenticated attacker to execute arbitrary code on an agent host due to improper validation of metadata used during script execution.","title":"IBM MQ: Managed File Transfer agent arbitrary code execution (CVE-2026-11724)","url":"https://feed.craftedsignal.io/briefs/2026-11-ibm-mq-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - IBM MQ 9.4.0.0 Through 9.4.5.1 CD","version":"https://jsonfeed.org/version/1.1"}