CVE-2026-11725

Summary

The flaw in IBM MQ allows an authenticated attacker to cause a denial of service or execute arbitrary code due to an integer overflow in MQINQ request processing, which can lead to system instability or unauthorized code execution.

Exploitability

Exploitation requires authentication and knowledge of the integer overflow condition, making it moderately difficult to exploit.

Blast radius

If exploited, the impact could be severe, leading to a complete denial of service or execution of arbitrary code on the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM MQ version 9.2.5.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.