Live › vulnerability › CVE-2026-14511
Go to dashboardIBM MQ versions 9.4.5.0 through 9.4.5.1 can be crashed by a specially crafted message sent by an authenticated user. The crash affects applications that consume the message, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running IBM MQ 9.4.5.0 through 9.4.5.1 where authenticated users can send messages to queues read by applications. The sources do not describe the exact message path or which consumer types crash. Systems on other MQ versions are not listed as affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ibm mq | vendor | = 9.4.5.0 | – |
| ibm mq | vendor | = 9.4.5.1 | – |
dspmqver on the queue manager host and compare the reported version against 9.4.5.0 and 9.4.5.19.4.5.1 as listed in the IBM advisory (fixed version not named in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.
This page as .md · .json · in your agent: get_signal("CVE-2026-14511")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.