HIGH

CVE-2026-13293

2026-09-14 CVSS v3.1

CVSS

8.8

Description

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote authenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

Weakness (CWE)

CWE-502 Deserialization of Untrusted Data

EPSS Score

0.56%

Probability of exploitation in next 30 days

45.6th percentile

References

https://www.ibm.com/support/pages/node/7284896

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE