CVE-2026-10575

Summary

The flaw in IBM MQ allows an authenticated attacker to cause a denial of service or potentially escalate privileges through a heap buffer overflow during MQPUT operations with malformed distribution headers.

Exploitability

Exploitation requires an authenticated attacker and malformed distribution headers, making it moderately difficult to exploit.

Blast radius

If exploited, the impact could be significant, leading to service disruption or privilege escalation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM MQ 9.2.5.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.