Loading vulnerability…
IBM MQ Message Distribution List Structure Validation Vulnerability
CVE-2026-11381 is an improper validation vulnerability in IBM MQ's handling of message distribution list structures. Insufficient validation of these structures can allow an authenticated remote attacker to trigger a denial of service or potentially achieve arbitrary code execution. The vulnerability is classified as CWE-122.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can cause denial of service affecting IBM MQ availability. It may also permit arbitrary code execution, with potential high-impact compromise of confidentiality, integrity, and availability in the security context of the affected IBM MQ process.
If you can’t patch tonight, do this now.
No vendor-provided workaround is available in the available information. Until patched, restrict network access to MQ listeners and administration interfaces to authorized systems, enforce least-privilege authenticated access, and monitor for anomalous message distribution list activity or unexpected MQ process failures.
Patch, then assume compromise.
Apply IBM MQ security updates: upgrade IBM MQ 9.1 LTS to 9.1.0.38, 9.2 LTS to 9.2.0.44, 9.3 LTS to 9.3.0.42, or 9.4 LTS to 9.4.0.26. Users of IBM MQ 9.3 Continuous Delivery, 9.4 Continuous Delivery, and 10.0.0.0 should upgrade to 10.0.0.5.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.