---
id: "CVE-2026-119848"
page: "https://infrastack.ai/live/CVE-2026-119848"
kind: "vulnerability"
aliases: ["CVE-2026-119848"]
title: "Windows Message Queuing: bad input lets an authorized user crash the service"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Message Queuing", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "msmq", "windows"]
not_affected_if: ["msmq-not-installed"]
published_at: "2026-11-10T19:20:02+00:00"
first_seen_at: "2026-11-10T19:24:59+00:00"
updated_at: "2026-11-10T20:02:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119848", "first_seen_at": "2026-11-10T19:24:59+00:00"}]
exploit_sources: []
---

# Windows Message Queuing: bad input lets an authorized user crash the service

Link for people: https://infrastack.ai/live/CVE-2026-119848 (this .md is for agents)

Windows Message Queuing does not validate some input properly. An attacker with valid access can send crafted traffic over the network to deny service to the queue.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Message Queuing affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119848

## From the sources

Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_