IBM security advisory (AV26-1135)

Serial number: AV26-1135
Date: November 9, 2026

As of November 4, 2026, IBM is affected by vulnerabilities in the following products:

• IBM MQ
  • Prior to or equal to 10.0.0.5 LTS and CD
  • Prior to or equal to 9.2.0.44 LTS
  • Prior to or equal to 9.3.0.42 LTS
  • Prior to or equal to 9.4.0.26 LTS
  • Prior to or equal to 9.4.5.1 CD
• IBM Watson Speech Services Cartridge
  • Prior to or equal to 5.4.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-11724)
• Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. (CVE-2026-17493)
• IBM Product Security Incident Response