CVE-2026-13285

IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Score

CVSS 3.1 7.1 High

Status

Awaiting Analysis - psirt@us.ibm.com

Published

2026-09-14

Last modified

2026-09-18

Weaknesses

CWE-611

Affected products

• Mq (Ibm)

References

• https://www.ibm.com/support/pages/node/7284940