HIGH

CVE-2026-13275

2026-09-14 CVSS v3.1

CVSS

7.1

Description

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 Managed File Transfer could allow an authenticated attacker to read arbitrary files or perform server-side request forgery due to XML external entity injection in reply message processing.

Weakness (CWE)

CWE-611 XML External Entity (XXE)

EPSS Score

0.25%

Probability of exploitation in next 30 days

16.9th percentile

References

https://www.ibm.com/support/pages/node/7284897

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE