Loading vulnerability…
Improper Message Header Offset Validation in IBM MQ for HPE NonStop
CVE-2026-11726 is an improper input-validation vulnerability in IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40. The product does not properly validate offset values in message headers. An authenticated attacker able to submit crafted messages can exploit malformed header offsets to disclose sensitive information or cause a denial of service.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can disclose sensitive information processed or accessible by the affected IBM MQ instance, or cause a denial of service affecting IBM MQ availability.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.