HIGHCVSS v3.1 8.8Vulnerability
CVE-2026-13292
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through transfer request metadata.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-04T21:42:22.291815+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.8
- Retrieved at
- 2026-11-04T21:43:05+00:00
- Score
- 8.8
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-13292
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-04T21:38:26+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-04T21:18:12.290
- Last modified
- 2026-11-04T21:18:12.403
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph