CVE-2026-12665
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.
Affected (109)
Products: Ibm: Mq Operator, Supplied Mq Advanced Container Images
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 2.0.0 ≤ version ≤ 2.0.29 | |
| Version 10.0.0.0 r1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.3.0.0 r1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.4.0.10 r1 |
References (1)
Timeline
No history available yet.