CVE-2026-10858

CriticalCVSS 9.9

Published: 18/09/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 has a heap buffer underflow when processing multi-segment messages, which could allow an authenticated attacker to cause denial of service or arbitrary code execution.

Risk Assessment

An authenticated attacker could crash the service or execute arbitrary code.

Recommendation

Upgrade IBM MQ for HPE NonStop to a patched version.

Other vulnerabilities in IBM MQ for HPE NonStop

CVE-2026-10744High
IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 contain an integer overflow in MQINQ request validation. An authenticated attacker could cause a denial of service or potentially escalate privileges.

Original NVD description (English source)

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.