CVE-2026-10858: falha crítica em IBM MQ for HPE NonStop
IBM MQ for HPE NonStop is vulnerable to a denial of service attack
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.9epss 0.6%
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
IBM · MQ for HPE NonStopCVEs relacionadas — IBM MQ for HPE NonStop
No mesmo produto, das mais perigosas para as menos.
CVE-2020-4466MEDIUMCVE-2020-4466EPSS 1.4%CVE-2020-4376MEDIUMCVE-2020-4376EPSS 1.1%CVE-2024-51470MEDIUMIBM MQ denial of serviceEPSS 0.7%CVE-2022-40237MEDIUMIBM MQ for HPE NonStop denial of serviceEPSS 0.7%CVE-2026-11727HIGHIBM MQ for HPE NonStop is vulnerable to a denial of service issueEPSS 0.6%CVE-2026-11381HIGHIBM MQ for HPE NonStop is vulnerable to a denial of service issueEPSS 0.6%