Threats tagged 'ghsa-pfg6-g479-pc6h'

IBM MQ versions 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD Managed File Transfer contain a vulnerability involving improper restriction of XML external entity (XXE) references during command queue processing. This flaw could allow an authenticated attacker to access sensitive information or cause a denial of service. The vulnerability is tracked as CVE-2026-13271 and has a high severity with a CVSS score of 8.1. No public exploits or patch information are provided in the data.