CVE-2026-10030 IBM MQ Console is vulnerable to privilege escalation

IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks...

CVE-2026-10030

IBM MQ versions 9.3 LTS, 9.4 LTS, 9.3 CD, 9.4 CD, and 10.0.0.0 are affected by an improper authorization flaw (CWE-285) in the REST API and Console component. An authenticated non-administrative user with only read-only console access can create and start queue managers on the host, leading to pr...

CVE-2026-10030 IBM MQ Console is vulnerable to privilege escalation

IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks...

CVE-2026-10030: Improper Authorization

IBM MQ Console allows authenticated non-administrative users to create and start queue managers due to improper authorization checks...

PT-2026-95446

Name of the Vulnerable Software and Affected Versions IBM MQ Console affected versions not specified Description Improper authorization checks in the IBM MQ Console allow authenticated users without administrative privileges to create and start queue managers. A queue manager is a central compone...