{"id":"CVE-2026-10743","state":"PUBLISHED","title":"IBM MQ Race Condition","description":"IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.","publishedAt":"2026-10-19T16:41:25.083Z","updatedAt":"2026-10-20T03:55:38.958Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"ibm"},"assigner":"ibm","products":["IBM MQ Operator","IBM MQ Advanced container images"],"affected":[{"vendor":"IBM","product":"MQ Operator","defaultStatus":"unaffected","versions":[{"version":"3.2.0","status":"affected","lessThanOrEqual":"3.2.29","versionType":"semver"},{"version":"3.3.0","status":"affected","lessThan":"3.4.0","versionType":"semver"},{"version":"3.4.1","status":"affected","versionType":"semver"},{"version":"3.5.0","status":"affected","versionType":"semver"},{"version":"3.5.1","status":"affected","lessThanOrEqual":"3.5.3","versionType":"semver"},{"version":"3.6.0","status":"affected","lessThanOrEqual":"3.6.4","versionType":"semver"},{"version":"3.7.0","status":"affected","lessThanOrEqual":"3.7.2","versionType":"semver"},{"version":"3.8.0","status":"affected","versionType":"semver"},{"version":"3.8.1","status":"affected","versionType":"semver"},{"version":"3.9.0","status":"affected","versionType":"semver"},{"version":"3.9.1","status":"affected","versionType":"semver"},{"version":"3.9.2","status":"affected","versionType":"semver"},{"version":"4.0.0","status":"affected","versionType":"semver"},{"version":"4.0.1","status":"affected","versionType":"semver"},{"version":"4.0.2","status":"affected","versionType":"semver"},{"version":"4.0.3","status":"affected","versionType":"semver"},{"version":"4.0.4","status":"affected","versionType":"semver"},{"version":"2.0.0","status":"affected","lessThanOrEqual":"2.0.29","versionType":"semver"}]},{"vendor":"IBM","product":"MQ Advanced container images","defaultStatus":"unaffected","versions":[{"version":"9.4.0.6-r1","status":"affected","lessThanOrEqual":"r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2","versionType":"semver"},{"version":"9.4.0.6-r2","status":"affected"},{"version":"9.4.0.7-r1","status":"affected"},{"version":"9.4.0.10-r1","status":"affected"},{"version":"9.4.0.10-r2","status":"affected"},{"version":"9.4.0.11-r1","status":"affected"},{"version":"9.4.0.11-r2","status":"affected"},{"version":"9.4.0.11-r3","status":"affected"},{"version":"9.4.0.12-r1","status":"affected"},{"version":"9.4.0.15-r1","status":"affected","lessThanOrEqual":"9.4.0.15-r4","versionType":"custom"},{"version":"9.4.0.16-r1","status":"affected"},{"version":"9.4.0.16-r2","status":"affected"},{"version":"9.4.0.17-r1","status":"affected"},{"version":"9.4.0.17-r2","status":"affected"},{"version":"9.4.0.20-r1","status":"affected"},{"version":"9.4.0.21-r1","status":"affected"},{"version":"9.4.0.21-r2","status":"affected"},{"version":"9.4.0.25-r1","status":"affected","lessThanOrEqual":"9.4.0.25-r3","versionType":"custom"},{"version":"9.4.0.26-r1","status":"affected"},{"version":"9.4.1.0-r1","status":"affected"},{"version":"9.4.1.0-r2","status":"affected"},{"version":"9.4.1.1-r1","status":"affected"},{"version":"9.4.2.0-r1","status":"affected"},{"version":"9.4.2.0-r2","status":"affected"},{"version":"9.4.2.1-r1","status":"affected"},{"version":"9.4.2.1-r2","status":"affected"},{"version":"9.4.3.0-r1","status":"affected"},{"version":"9.4.3.0-r2","status":"affected"},{"version":"9.4.3.1-r1","status":"affected","lessThanOrEqual":"9.4.3.1-r3","versionType":"custom"},{"version":"9.4.4.0-r1","status":"affected"},{"version":"9.4.4.1-r1","status":"affected"},{"version":"9.4.5.0-r1","status":"affected"},{"version":"9.4.5.0-r2","status":"affected"},{"version":"9.4.5.1-r1","status":"affected"},{"version":"10.0.0.0-r1","status":"affected","lessThanOrEqual":"10.0.0.0-r4","versionType":"custom"},{"version":"10.0.0.5-r1","status":"affected"},{"version":"9.3.0.0-r1","status":"affected"},{"version":"9.3.0.0-r2","status":"affected"},{"version":"9.3.0.0-r3","status":"affected"},{"version":"9.3.0.1-r1","status":"affected"},{"version":"9.3.0.1-r2","status":"affected"},{"version":"9.3.0.1-r3","status":"affected"},{"version":"9.3.0.1-r4","status":"affected"},{"version":"9.3.0.3-r1","status":"affected"},{"version":"9.3.0.4-r1","status":"affected"},{"version":"9.3.0.4-r2","status":"affected"},{"version":"9.3.0.5-r1","status":"affected"},{"version":"9.3.0.5-r2","status":"affected"},{"version":"9.3.0.5-r3","status":"affected"},{"version":"9.3.0.6-r1","status":"affected"},{"version":"9.3.0.10-r1","status":"affected"},{"version":"9.3.0.10-r2","status":"affected"},{"version":"9.3.0.11-r1","status":"affected"},{"version":"9.3.0.11-r2","status":"affected"},{"version":"9.3.0.15-r1","status":"affected"},{"version":"9.3.0.16-r1","status":"affected"},{"version":"9.3.0.16-r2","status":"affected"},{"version":"9.3.0.17-r1","status":"affected"},{"version":"9.3.0.17-r2","status":"affected"},{"version":"9.3.0.17-r3","status":"affected"},{"version":"9.3.0.20-r1","status":"affected"},{"version":"9.3.0.20-r2","status":"affected"},{"version":"9.3.0.21-r1","status":"affected"},{"version":"9.3.0.21-r2","status":"affected"},{"version":"9.3.0.21-r3","status":"affected"},{"version":"9.3.0.25-r1","status":"affected"},{"version":"9.4.0.0-r1","status":"affected"},{"version":"9.4.0.0-r2","status":"affected"},{"version":"9.4.0.0-r3","status":"affected"},{"version":"9.4.0.5-r1","status":"affected"},{"version":"9.4.0.5-r2","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/7292667"],"weaknesses":["CWE-1223"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/10xxx/CVE-2026-10743.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-10743","state":"PUBLISHED","datePublished":"2026-10-19T16:41:25.083Z","dateUpdated":"2026-10-20T03:55:38.958Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2026-06-03T13:27:15.655Z"},"containers":{"cna":{"title":"IBM MQ Race Condition","descriptions":[{"lang":"en","value":"IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations."}],"affected":[{"vendor":"IBM","product":"MQ Operator","defaultStatus":"unaffected","versions":[{"version":"3.2.0","status":"affected","lessThanOrEqual":"3.2.29","versionType":"semver"},{"version":"3.3.0","status":"affected","lessThan":"3.4.0","versionType":"semver"},{"version":"3.4.1","status":"affected","versionType":"semver"},{"version":"3.5.0","status":"affected","versionType":"semver"},{"version":"3.5.1","status":"affected","lessThanOrEqual":"3.5.3","versionType":"semver"},{"version":"3.6.0","status":"affected","lessThanOrEqual":"3.6.4","versionType":"semver"},{"version":"3.7.0","status":"affected","lessThanOrEqual":"3.7.2","versionType":"semver"},{"version":"3.8.0","status":"affected","versionType":"semver"},{"version":"3.8.1","status":"affected","versionType":"semver"},{"version":"3.9.0","status":"affected","versionType":"semver"},{"version":"3.9.1","status":"affected","versionType":"semver"},{"version":"3.9.2","status":"affected","versionType":"semver"},{"version":"4.0.0","status":"affected","versionType":"semver"},{"version":"4.0.1","status":"affected","versionType":"semver"},{"version":"4.0.2","status":"affected","versionType":"semver"},{"version":"4.0.3","status":"affected","versionType":"semver"},{"version":"4.0.4","status":"affected","versionType":"semver"},{"version":"2.0.0","status":"affected","lessThanOrEqual":"2.0.29","versionType":"semver"}]},{"vendor":"IBM","product":"MQ Advanced container images","defaultStatus":"unaffected","versions":[{"version":"9.4.0.6-r1","status":"affected","lessThanOrEqual":"r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2","versionType":"semver"},{"version":"9.4.0.6-r2","status":"affected"},{"version":"9.4.0.7-r1","status":"affected"},{"version":"9.4.0.10-r1","status":"affected"},{"version":"9.4.0.10-r2","status":"affected"},{"version":"9.4.0.11-r1","status":"affected"},{"version":"9.4.0.11-r2","status":"affected"},{"version":"9.4.0.11-r3","status":"affected"},{"version":"9.4.0.12-r1","status":"affected"},{"version":"9.4.0.15-r1","status":"affected","lessThanOrEqual":"9.4.0.15-r4","versionType":"custom"},{"version":"9.4.0.16-r1","status":"affected"},{"version":"9.4.0.16-r2","status":"affected"},{"version":"9.4.0.17-r1","status":"affected"},{"version":"9.4.0.17-r2","status":"affected"},{"version":"9.4.0.20-r1","status":"affected"},{"version":"9.4.0.21-r1","status":"affected"},{"version":"9.4.0.21-r2","status":"affected"},{"version":"9.4.0.25-r1","status":"affected","lessThanOrEqual":"9.4.0.25-r3","versionType":"custom"},{"version":"9.4.0.26-r1","status":"affected"},{"version":"9.4.1.0-r1","status":"affected"},{"version":"9.4.1.0-r2","status":"affected"},{"version":"9.4.1.1-r1","status":"affected"},{"version":"9.4.2.0-r1","status":"affected"},{"version":"9.4.2.0-r2","status":"affected"},{"version":"9.4.2.1-r1","status":"affected"},{"version":"9.4.2.1-r2","status":"affected"},{"version":"9.4.3.0-r1","status":"affected"},{"version":"9.4.3.0-r2","status":"affected"},{"version":"9.4.3.1-r1","status":"affected","lessThanOrEqual":"9.4.3.1-r3","versionType":"custom"},{"version":"9.4.4.0-r1","status":"affected"},{"version":"9.4.4.1-r1","status":"affected"},{"version":"9.4.5.0-r1","status":"affected"},{"version":"9.4.5.0-r2","status":"affected"},{"version":"9.4.5.1-r1","status":"affected"},{"version":"10.0.0.0-r1","status":"affected","lessThanOrEqual":"10.0.0.0-r4","versionType":"custom"},{"version":"10.0.0.5-r1","status":"affected"},{"version":"9.3.0.0-r1","status":"affected"},{"version":"9.3.0.0-r2","status":"affected"},{"version":"9.3.0.0-r3","status":"affected"},{"version":"9.3.0.1-r1","status":"affected"},{"version":"9.3.0.1-r2","status":"affected"},{"version":"9.3.0.1-r3","status":"affected"},{"version":"9.3.0.1-r4","status":"affected"},{"version":"9.3.0.3-r1","status":"affected"},{"version":"9.3.0.4-r1","status":"affected"},{"version":"9.3.0.4-r2","status":"affected"},{"version":"9.3.0.5-r1","status":"affected"},{"version":"9.3.0.5-r2","status":"affected"},{"version":"9.3.0.5-r3","status":"affected"},{"version":"9.3.0.6-r1","status":"affected"},{"version":"9.3.0.10-r1","status":"affected"},{"version":"9.3.0.10-r2","status":"affected"},{"version":"9.3.0.11-r1","status":"affected"},{"version":"9.3.0.11-r2","status":"affected"},{"version":"9.3.0.15-r1","status":"affected"},{"version":"9.3.0.16-r1","status":"affected"},{"version":"9.3.0.16-r2","status":"affected"},{"version":"9.3.0.17-r1","status":"affected"},{"version":"9.3.0.17-r2","status":"affected"},{"version":"9.3.0.17-r3","status":"affected"},{"version":"9.3.0.20-r1","status":"affected"},{"version":"9.3.0.20-r2","status":"affected"},{"version":"9.3.0.21-r1","status":"affected"},{"version":"9.3.0.21-r2","status":"affected"},{"version":"9.3.0.21-r3","status":"affected"},{"version":"9.3.0.25-r1","status":"affected"},{"version":"9.4.0.0-r1","status":"affected"},{"version":"9.4.0.0-r2","status":"affected"},{"version":"9.4.0.0-r3","status":"affected"},{"version":"9.4.0.5-r1","status":"affected"},{"version":"9.4.0.5-r2","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7292667","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1223","lang":"en","description":"CWE-1223 Race Condition for Write-Once Attributes","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-10-19T16:41:25.083Z"},"solutions":[{"lang":"en","value":"Issues mentioned by this security bulletin are addressed in -\n\n * IBM MQ Operator v4.1.0 https://www.ibm.com/docs/en/ibm-mq/10.0.x CD release that included IBM supplied MQ Advanced 10.0.1.0-r1 https://www.ibm.com/docs/en/ibm-mq/10.0.x container image. \n * IBM MQ Operator  v4.0.5 https://www.ibm.com/docs/en/ibm-mq/10.0.x SC2 release that included IBM supplied MQ Advanced 10.0.0.5-r2 https://www.ibm.com/docs/en/ibm-mq/10.0.x container image. \n * IBM MQ Operator v3.2.30 https://www.ibm.com/docs/en/ibm-mq/9.4.x SC2 release that included IBM supplied MQ Advanced 9.4.0.26-r2 https://www.ibm.com/docs/en/ibm-mq/9.4.x container image.\n * IBM MQ Container 10.0.1.0-r1 https://www.ibm.com/docs/en/ibm-mq/10.0.x and  10.0.0.5-r2 https://www.ibm.com/docs/en/ibm-mq/10.0.x release.\n\n\n\n\nIBM strongly recommends applying the latest container images. \n\n\n\nIBM MQ Operator v4.1.0 CD release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mq-operator\n\n\n\nv4.1.0\n\n\n\nicr.io\n\n\n\nicr.io/cpopen/ibm-mq-operator@sha256:ed9a217869637c8749270fd485517ea62c8dffbd198a8f7090042ebbeb5bd127\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.1.0-r1\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.1.0-r1\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Operator v4.0.5 SC2 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mq-operator\n\n\n\nv4.0.5\n\n\n\nicr.io\n\n\n\nicr.io/cpopen/ibm-mq-operator@sha256:1109597707dfb3fbde274e39698f08a9011f13ca75746a30414e246459571930\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.0.5-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.0.5-r2\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Operator v3.2.30 SC2 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mq-operator\n\n\n\nv3.2.30\n\n\n\nicr.io\n\n\n\nicr.io/cpopen/ibm-mq-operator@sha256:57dda3eb0391e540ff18029fdcd44a14951a73860bdc7544be5879a8ca49fc40\n\n\n\nibm-mqadvanced-server\n\n\n\n9.4.0.26-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:4fc5474a0cd9da504bd4bd26ce5c0b91e088656aa56decb315b450ac7868b7e8\n\n\n\nibm-mqadvanced-server-integration\n\n\n\n9.4.0.26-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server-integration@sha256:a6656d4b9c7db64dd9247c22a00607baf2c9141392d7bf5860a93325604f26ad\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n9.4.0.26-r2\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:abf4c7e931f77aa2aeb340ad054edb35c0f382bf4a7c776d838afab23106b06a\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Container 10.0.1.0-r1 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.1.0-r1\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.1.0-r1\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nIBM MQ Container 10.0.0.5-r2 release details:\n\n\n\nImage\n\n\n\nFix Version\n\n\n\nRegistry\n\n\n\nImage Location\n\n\n\nibm-mqadvanced-server\n\n\n\n10.0.0.5-r2\n\n\n\ncp.icr.io\n\n\n\ncp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652\n\n\n\nibm-mqadvanced-server-dev\n\n\n\n10.0.0.5-r2\n\n\n\nicr.io\n\n\n\nicr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b","supportingMedia":[{"type":"text/html","base64":false,"value":"

Issues mentioned by this security bulletin are addressed in -

IBM strongly recommends applying the latest container images. 

IBM MQ Operator v4.1.0 CD release details:

Image

Fix Version

Registry

Image Location

ibm-mq-operator

v4.1.0

icr.io

icr.io/cpopen/ibm-mq-operator@sha256:ed9a217869637c8749270fd485517ea62c8dffbd198a8f7090042ebbeb5bd127

ibm-mqadvanced-server

10.0.1.0-r1

cp.icr.io

cp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3

ibm-mqadvanced-server-dev

10.0.1.0-r1

icr.io

icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2

IBM MQ Operator v4.0.5 SC2 release details:

Image

Fix Version

Registry

Image Location

ibm-mq-operator

v4.0.5

icr.io

icr.io/cpopen/ibm-mq-operator@sha256:1109597707dfb3fbde274e39698f08a9011f13ca75746a30414e246459571930

ibm-mqadvanced-server

10.0.0.5-r2

cp.icr.io

cp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652

ibm-mqadvanced-server-dev

10.0.0.5-r2

icr.io

icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b


IBM MQ Operator v3.2.30 SC2 release details:

Image

Fix Version

Registry

Image Location

ibm-mq-operator

v3.2.30

icr.io

icr.io/cpopen/ibm-mq-operator@sha256:57dda3eb0391e540ff18029fdcd44a14951a73860bdc7544be5879a8ca49fc40

ibm-mqadvanced-server

9.4.0.26-r2

cp.icr.io

cp.icr.io/cp/ibm-mqadvanced-server@sha256:4fc5474a0cd9da504bd4bd26ce5c0b91e088656aa56decb315b450ac7868b7e8

ibm-mqadvanced-server-integration

9.4.0.26-r2

cp.icr.io

cp.icr.io/cp/ibm-mqadvanced-server-integration@sha256:a6656d4b9c7db64dd9247c22a00607baf2c9141392d7bf5860a93325604f26ad

ibm-mqadvanced-server-dev

9.4.0.26-r2

icr.io

icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:abf4c7e931f77aa2aeb340ad054edb35c0f382bf4a7c776d838afab23106b06a

IBM MQ Container 10.0.1.0-r1 release details:

Image

Fix Version

Registry

Image Location

ibm-mqadvanced-server

10.0.1.0-r1

cp.icr.io

cp.icr.io/cp/ibm-mqadvanced-server@sha256:06f0892b36e879d0f8957477deeabfe2b4e0fda13f64792edbe7825caf7b77e3

ibm-mqadvanced-server-dev

10.0.1.0-r1

icr.io

icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:129d1d736e94bae071039136585734b7ccc6cfd6e1cc7dacb9af59e60d0a57c2

IBM MQ Container 10.0.0.5-r2 release details:

Image

Fix Version

Registry

Image Location

ibm-mqadvanced-server

10.0.0.5-r2

cp.icr.io

cp.icr.io/cp/ibm-mqadvanced-server@sha256:0218cf9da8c763b502afb02e7c0406654ac64fdd015410d7b73496fbed89a652

ibm-mqadvanced-server-dev

10.0.0.5-r2

icr.io

icr.io/ibm-messaging/ibm-mqadvanced-server-dev@sha256:6610f615ac4bf129668b70a9ae288386ea6bee87112056b83792ad2f901bcf9b

"}]}],"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.29"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.4.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.4.1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.5.0:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.1","versionEndIncluding":"3.5.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndIncluding":"3.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7.0","versionEndIncluding":"3.7.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.8.0:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.8.1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.9.0:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.9.1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:3.9.2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:4.0.0:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:4.0.1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:4.0.2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:4.0.3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:4.0.4:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.29"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.7-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.12-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0.15-r1","versionEndIncluding":"9.4.0.15-r4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.20-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0.25-r1","versionEndIncluding":"9.4.0.25-r3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.26-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.1-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.3.1-r1","versionEndIncluding":"9.4.3.1-r3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.1-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.1-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0.0-r1","versionEndIncluding":"10.0.0.0-r4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:10.0.0.5-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r4:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.3-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.6-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.15-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.25-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r2:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r3:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r1:*:*:*:*:*:*:*"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r2:*:*:*:*:*:*:*"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-19T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-10743"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-20T03:55:38.958Z"}}]}}}