Security Bulletin: IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution (CVE-2026-12355)

Summary IBM MQ has addressed a bypass of the JNDI name sanitization in the Resource Adapter IVT servlet that could allow an unauthenticated remote attacker to supply a malicious JNDI URL and execute arbitrary code on the hosting application server if the IVT EAR is deployed Vulnerability Details...