CVEvulnerability

CVE-2026-12148

8.8 HIGH Published 2026-10-19 Modified 2026-10-23 Official page ↗
Status
Analyzed
Published
2026-10-19
Last modified
2026-10-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502

Description

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.

Affected configurations

• ibm mq operator (>= 2.0.0 <= 2.0.29) • ibm mq operator (>= 3.2.0 <= 3.2.29) • ibm mq operator 3.3.0 • ibm mq operator 3.4.0 • ibm mq operator 3.4.1 • ibm mq operator 3.5.0 • ibm mq operator 3.5.1 • ibm mq operator 3.5.2 • ibm mq operator 3.5.3 • ibm mq operator 3.6.0 • ibm mq operator 3.6.1 • ibm mq operator 3.6.2 • ibm mq operator 3.6.3 • ibm mq operator 3.6.4 • ibm mq operator 3.7.0 • ibm mq operator 3.7.1 • ibm mq operator 3.7.2 • ibm mq operator 3.8.0 • ibm mq operator 3.8.1 • ibm mq operator 3.9.0 • ibm mq operator 3.9.1 • ibm mq operator 3.9.2 • ibm mq operator 4.0.0 • ibm mq operator 4.0.1 • ibm mq operator 4.0.2 • ibm mq operator 4.0.3 • ibm mq operator 4.0.4 • ibm supplied mq advanced container images 9.4.1.0 • ibm supplied mq advanced container images 9.4.1.1 • ibm supplied mq advanced container images 9.4.2.0 • ibm supplied mq advanced container images 9.4.2.1 • ibm supplied mq advanced container images 9.4.3.0 • ibm supplied mq advanced container images 9.4.3.1 • ibm supplied mq advanced container images 9.4.4.0 • ibm supplied mq advanced container images 9.4.4.1 • ibm supplied mq advanced container images 9.4.5.0 • ibm supplied mq advanced container images 9.4.5.1 • ibm supplied mq advanced container images 10.0.0.0 • ibm supplied mq advanced container images 10.0.0.5 • ibm supplied mq advanced container images 9.3.0.0 • ibm supplied mq advanced container images 9.3.0.1 • ibm supplied mq advanced container images 9.3.0.3 • ibm supplied mq advanced container images 9.3.0.4 • ibm supplied mq advanced container images 9.3.0.5 • ibm supplied mq advanced container images 9.3.0.6 • ibm supplied mq advanced container images 9.3.0.10 • ibm supplied mq advanced container images 9.3.0.11 • ibm supplied mq advanced container images 9.3.0.15 • ibm supplied mq advanced container images 9.3.0.16 • ibm supplied mq advanced container images 9.3.0.17 • ibm supplied mq advanced container images 9.3.0.20 • ibm supplied mq advanced container images 9.3.0.21 • ibm supplied mq advanced container images 9.3.0.25 • ibm supplied mq advanced container images 9.4.0.0 • ibm supplied mq advanced container images 9.4.0.5 • ibm supplied mq advanced container images 9.4.0.6 • ibm supplied mq advanced container images 9.4.0.7 • ibm supplied mq advanced container images 9.4.0.10 • ibm supplied mq advanced container images 9.4.0.11 • ibm supplied mq advanced container images 9.4.0.12 … and 7 more

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References