CVE-2026-13292

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer reque...

CVE-2026-13292

The IBM MQ Managed File Transfer component is affected by an arbitrary code execution vulnerability (CVE-2026-13292 ). An authenticated attacker can execute arbitrary code by injecting malicious environment variables through transfer request metadata. This issue is categorized as CWE-15: External...

EUVD-2026-117067

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer reque...

CVE-2026-13292 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer reque...

PT-2026-137170

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS IBM MQ versions 9.3.0.0 through 9.3.0.42 LTS IBM MQ versions 9.4.0.0 through 9.4.0.26 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ versions 10.0.0.0 through 10.0.0.5 LTS and CD Description ...

Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-13292)

Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-13292 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through...