Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-10744— IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation

Quick assessment

Affected

IBM MQ for HPE NonStop

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

IBM MQ for HPE NonStop 8.1.0 至 8.1.0.40 版本中，由于在 MQINQ 请求验证过程中存在整数溢出漏洞，经过身份验证的攻击者可借此触发服务中断（拒绝服务），并可能进一步提升权限。

CVSS 7.5 · High EPSS 0.37% · P31 Updated Sep 19, 2026

Possible ATT&CK Techniques 2 AI

T1499 · Endpoint Denial of Service T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
IBM	MQ for HPE NonStop	`8.1.0≤ 8.1.0.40`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation

Source: CVE Program / CVE List V5

Vulnerability Description

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to an integer overflow in MQINQ request validation.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

堆缓冲区溢出

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
IBM	MQ for HPE NonStop	8.1.0 ~ 8.1.0.40	`cpe:2.3:a:ibm:mq_for_hpe_nonstop:8.1.0:::::::*`

II. Public POCs for CVE-2026-10744

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-10744

请登录查看更多情报信息。

Other References for CVE-2026-10744 (1)

🔗 Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation (CVE-2026-10744) vendor-advisory patch

https://www.cve.org/CVERecord?id=CVE-2026-10744

Same Patch Batch · IBM · 2026-09-18 · 90 CVEs total

CVE-2026-10747	10.0 CRITICAL	IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message p
CVE-2025-15399	10.0 CRITICAL	Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool a
CVE-2026-84075	9.9 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84078	9.9 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84064	9.9 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-10858	9.9 CRITICAL	IBM MQ for HPE NonStop is vulnerable to a denial of service attack
CVE-2026-80442	9.9 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-82340	9.8 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-80441	9.8 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-82967	9.8 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84082	9.8 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-81657	9.8 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-82832	9.6 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-75878	9.1 CRITICAL	IBM Sterling File Gateway is Vulnerable to Authentication Bypass
CVE-2026-84073	9.1 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84031	9.0 CRITICAL	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84074	8.9 HIGH	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84106	8.9 HIGH	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-84070	8.9 HIGH	IBM Guardium Data Protection is affected by multiple vulnerabilities.
CVE-2026-11381	8.8 HIGH	IBM MQ for HPE NonStop is vulnerable to a denial of service issue

Showing top 20 of 90 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: MQ for HPE NonStop

Same vendor: IBM

Same weakness: CWE-122