CVE-2026-10744

HighCVSS 7.5

Published: 18/09/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 contain an integer overflow in MQINQ request validation. An authenticated attacker could cause a denial of service or potentially escalate privileges.

Risk Assessment

Organizations using IBM MQ on HPE NonStop are exposed to service unavailability or privilege escalation by an authenticated attacker.

Recommendation

Update IBM MQ for HPE NonStop to a version later than 8.1.0.40 and monitor for unusual MQINQ requests.

Other vulnerabilities in IBM MQ for HPE NonStop

CVE-2026-10858Critical
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 has a heap buffer underflow when processing multi-segment messages, which could allow an authenticated attacker to cause denial of service or arbitrary code execution.

Original NVD description (English source)

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.