IBM IBM MQ Appliance

Name: IBM IBM MQ Appliance
Brand: IBM

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical8high0medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-81204US	critical9.8	0.86% (58th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-81940US	high8.8	0.81% (57th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-79742US	high8.8	0.81% (57th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-78571US	high8.8	0.81% (57th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-78575US	high8.8	0.79% (56th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-76059US	high8.8	0.68% (52nd)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-79724US	critical9.8	0.67% (52nd)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-78569US	high8.8	0.65% (51st)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-81941US	high8.8	0.63% (50th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-85025US	critical9.8OT elevated	0.61% (49th)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2026-81211US	high8.8OT elevated	0.56% (46th)	—	no fix	2026-09-10	≤ vers:unknown/*

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-284Improper Access Control1 CVEs
CWE-693Protection Mechanism Failure1 CVEs
CWE-862Missing Authorization1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.