Threats affecting pkg:maven/com.ibm/mq-for-hpe-nonstop

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.5%	CVE-2026-11726IBM MQ for HPE NonStop · Out-of-bounds Read High8.1EPSS 0.5%2026-09-18CVE Database V5CVE-2026-11726 CVE-2026-11726 is a high-severity vulnerability in IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40. It involves an out-of-bounds read due to improper validation of message header offset values. An authenticated attacker could exploit this flaw to obtain sensitive information or cause a denial of service. EPSS 0.5%Vulnerability CWE-125 #ghsa-6r76-w3vq-7277	CVE Database V5	2026-09-18
High	7.5	EPSS 0.4%	CVE-2026-10744IBM MQ for HPE NonStop · Heap-based Buffer Overflow High7.5EPSS 0.4%2026-09-18CVE Database V5CVE-2026-10744 IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 contain a heap-based buffer overflow vulnerability caused by an integer overflow in MQINQ request validation. This flaw could allow an authenticated attacker to cause denial of service or potentially escalate privileges. EPSS 0.4%Vulnerability CWE-122 #ghsa-x437-8gwg-vphp	CVE Database V5	2026-09-18

Page 1 of 1