IBM MQ 9.4.0.0 Through 9.4.5.1 CD - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ibm-mq-9.4.0.0-through-9.4.5.1-cd/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 04 Nov 2026 22:07:22 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM MQ: Managed File Transfer agent arbitrary code execution (CVE-2026-11724)https://feed.craftedsignal.io/briefs/2026-11-ibm-mq-rce/Wed, 04 Nov 2026 22:07:22 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-ibm-mq-rce/IBM MQ Managed File Transfer (MFT) contains a vulnerability that could allow an authenticated attacker to execute arbitrary code on an agent host due to improper validation of metadata used during script execution.<p>CVE-2026-11724 affects IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD. The vulnerability permits an authenticated attacker to execute arbitrary code on an MFT agent host by exploiting improper metadata validation during script execution.</p> highadvisory