PULSE
ESPT
FEED
ransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransomakira reclama a Boyle, Pecharich, Cline, Whittington andStallings · Professional Servicesransomn0n reclama a Dompé Farmaceutici S.p.A. · IT · Healthcareransomn0n reclama a Cogent Biosciences, Inc. · US · Healthcareransomn0n reclama a Chartboost LLC · US · Technologyransomn0n reclama a Centrepoint · SA · Energy & Utilitiesransomn0n reclama a Resource Consultants · US · Professional Servicesransomqilin reclama a Rotstein & Shiffman · IL · Professional Servicesransomn0n reclama a Max Fashion · AE · Retail & E-Commerceransomn0n reclama a Hallmark Cards, Inc. · US · Retail & E-Commerceransomn0n reclama a Scry Analytics · US · Technologyransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransomakira reclama a Boyle, Pecharich, Cline, Whittington andStallings · Professional Servicesransomn0n reclama a Dompé Farmaceutici S.p.A. · IT · Healthcareransomn0n reclama a Cogent Biosciences, Inc. · US · Healthcareransomn0n reclama a Chartboost LLC · US · Technologyransomn0n reclama a Centrepoint · SA · Energy & Utilitiesransomn0n reclama a Resource Consultants · US · Professional Servicesransomqilin reclama a Rotstein & Shiffman · IL · Professional Servicesransomn0n reclama a Max Fashion · AE · Retail & E-Commerceransomn0n reclama a Hallmark Cards, Inc. · US · Retail & E-Commerceransomn0n reclama a Scry Analytics · US · Technology
← All CVEs
CVE WatchNov 6, 2026

CVE-2026-10859

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th

CVSS

7.5

High

EPSS

0.3%

p26

KEV

—

Exploit Today

8

0-100

Published: Nov 4, 2026 · Last modified: Nov 6, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code on consumer applications due to insecure deserialization of ObjectMessage payloads.

Official references
Related CVEs

No related CVEs by CWE or product.