← Database

CVE-2026-12538

MEDIUM CVSS: 5.4 Published: 2026-11-04 Modified: 2026-11-04

Description

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields.

Affected Platforms

Unknown

Weakness Type

CWE-124

References