What is GHSA-cmx7-5fpv-xc6x?

GHSA-cmx7-5fpv-xc6x is a security advisory published by GitHub Security Advisories with Critical severity. IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a...

Which CVE IDs does GHSA-cmx7-5fpv-xc6x cover?

GHSA-cmx7-5fpv-xc6x covers the following CVE IDs: CVE-2026-10858. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cmx7-5fpv-xc6x?

GHSA-cmx7-5fpv-xc6x has a CVSS v3 base score of 9.9, published by GitHub Security Advisories.

GHSA-cmx7-5fpv-xc6xCriticalCVSS 9.9

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-10858 →

📋 Description

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-10858
https://www.ibm.com/support/pages/node/7287704
https://github.com/advisories/GHSA-cmx7-5fpv-xc6x