CVE-2026-10858

Summary

This flaw allows an authenticated attacker to cause a denial of service or execute arbitrary code by exploiting a heap buffer underflow in the processing of multi-segment messages in IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40, making it a critical security risk.

Exploitability

Exploitation requires an authenticated attacker and the ability to send multi-segment messages, which may be challenging in environments where such messages are not commonly used.

Blast radius

If exploited, the impact could be severe, potentially leading to a complete denial of service or execution of arbitrary code, affecting the availability and integrity of the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM MQ for HPE NonStop 8.1.0.41 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.