{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-11728", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-06-09T02:32:45.930Z", "datePublished": "2026-09-15T17:42:20.952Z", "dateUpdated": "2026-09-16T03:56:56.779Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-15T17:42:20.952Z"}, "title": "IBM MQ .NET client is vulnerable to remote code execution", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "MQ", "versions": [{"status": "affected", "version": "9.1.0.0", "lessThanOrEqual": "9.1.0.37 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.2.0.0", "lessThanOrEqual": "9.2.0.43 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.3.0.0", "lessThanOrEqual": "9.3.0.41 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.3.0.0", "lessThanOrEqual": "9.3.5.1 CD", "versionType": "semver"}, {"status": "affected", "version": "9.4.0.0", "lessThanOrEqual": "9.4.0.25 LTS", "versionType": "semver"}, {"status": "affected", "version": "9.4.0.0", "lessThanOrEqual": "9.4.5.1 CD", "versionType": "semver"}, {"status": "affected", "version": "10.0.0.0"}], "cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7284943", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "This issue was addressed under Known Issue DT473417\nIBM MQ version 9.1 LTS\nApply cumulative security update 9.1.0.38\nIBM MQ version 9.2 LTS\nApply cumulative security update 9.2.0.44\nIBM MQ version 9.3 LTS\nApply cumulative security update 9.3.0.42\nIBM MQ version 9.4 LTS\nApply cumulative security update 9.4.0.26\nIBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0\nUpgrade to IBM MQ version 10.0.0.5", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>This issue was addressed under Known Issue DT473417</p><p>IBM MQ version 9.1 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.1.0.38</a></p><p>IBM MQ version 9.2 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.2.0.44</a></p><p>IBM MQ version 9.3 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.3.0.42</a></p><p>IBM MQ version 9.4 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update</a><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">\u00a09.4.0.26</a></p><p>IBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-100\" rel=\"noopener noreferrer nofollow\">Upgrade to IBM MQ version 10.0.0.5</a></p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-15T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-11728"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-16T03:56:56.779Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-11728", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-15T18:33:44.415689Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-15T18:33:52.118Z"}}], "cna": {"title": "IBM MQ .NET client is vulnerable to remote code execution", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "MQ", "versions": [{"status": "affected", "version": "9.1.0.0", "versionType": "semver", "lessThanOrEqual": "9.1.0.37 LTS"}, {"status": "affected", "version": "9.2.0.0", "versionType": "semver", "lessThanOrEqual": "9.2.0.43 LTS"}, {"status": "affected", "version": "9.3.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.0.41 LTS"}, {"status": "affected", "version": "9.3.0.0", "versionType": "semver", "lessThanOrEqual": "9.3.5.1 CD"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.0.25 LTS"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.5.1 CD"}, {"status": "affected", "version": "10.0.0.0"}]}], "solutions": [{"lang": "en", "value": "This issue was addressed under Known Issue DT473417\nIBM MQ version 9.1 LTS\nApply cumulative security update 9.1.0.38\nIBM MQ version 9.2 LTS\nApply cumulative security update 9.2.0.44\nIBM MQ version 9.3 LTS\nApply cumulative security update 9.3.0.42\nIBM MQ version 9.4 LTS\nApply cumulative security update 9.4.0.26\nIBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0\nUpgrade to IBM MQ version 10.0.0.5", "supportingMedia": [{"type": "text/html", "value": "<p>This issue was addressed under Known Issue DT473417</p><p>IBM MQ version 9.1 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.1.0.38</a></p><p>IBM MQ version 9.2 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.2.0.44</a></p><p>IBM MQ version 9.3 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update 9.3.0.42</a></p><p>IBM MQ version 9.4 LTS</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">Apply cumulative security update</a><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts\" rel=\"noopener noreferrer nofollow\">\u00a09.4.0.26</a></p><p>IBM MQ version 9.3 CD, 9.4 CD and 10.0.0.0</p><p><a href=\"https://www.ibm.com/support/pages/downloading-ibm-mq-100\" rel=\"noopener noreferrer nofollow\">Upgrade to IBM MQ version 10.0.0.5</a></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7284943", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-15T17:42:20.952Z"}}}, "cveMetadata": {"cveId": "CVE-2026-11728", "state": "PUBLISHED", "dateUpdated": "2026-09-16T03:56:56.779Z", "dateReserved": "2026-06-09T02:32:45.930Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-09-15T17:42:20.952Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.1.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.2.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:9.4.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:mq:10.0.0.0:*:*:*:*:*:*:*"], "product": "MQ", "vendor": "IBM", "versions": [{"lessThanOrEqual": "9.1.0.37 LTS", "status": "affected", "version": "9.1.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.2.0.43 LTS", "status": "affected", "version": "9.2.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.3.0.41 LTS", "status": "affected", "version": "9.3.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.3.5.1 CD", "status": "affected", "version": "9.3.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.4.0.25 LTS", "status": "affected", "version": "9.4.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.4.5.1 CD", "status": "affected", "version": "9.4.0.0", "versionType": "semver"}, {"status": "affected", "version": "10.0.0.0"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in the client due to a heap buffer overflow when receiving messages from a malicious queue manager or through a man-in-the-middle attack."}], "id": "CVE-2026-11728", "lastModified": "2026-09-16T19:21:55.793", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11728", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-09-15T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-09-15T18:17:12.257", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7284943"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}