CVE-2026-10743
HIGHDescription
IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.
Is your site exposed to CVE-2026-10743?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — Exploit Prediction
0.0028
Probability of exploitation
0.21%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
CWE-1223
CWE-1223
Affected Products
| Vendor | Product |
|---|---|
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
| ibm | supplied_mq_advanced_container_images |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2026-10743? +
IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations. It has a CVSS v3.1 base score of 8.8 (HIGH).
How severe is CVE-2026-10743? +
CVE-2026-10743 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0028, placing it in the 0th percentile for exploitation probability.
What products are affected by CVE-2026-10743? +
CVE-2026-10743 affects products from ibm, specifically: mq_operator, supplied_mq_advanced_container_images. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2026-10743? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2024-2975
8.8
A race condition was identified through which privilege escalation was possible in certain configurations.
CVE-2025-0077
4.0
In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead …
CVE-2024-23621
10.0
A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability …
CVE-2024-23622
10.0
A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this …
CVE-2023-47143
10.0
IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of …
CVE-2024-56346
10.0
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to …
