CVE-2026-12538

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields...

CVE-2026-12538

IBM MQ Appliance is affected by an improper validation vulnerability (tracked as CWE-124: Buffer Underwrite ) involving message header structure length fields. An authenticated attacker could leverage this to obtain sensitive information or cause a denial of service . Affected versions include 9....

EUVD-2026-117072

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields...

PT-2026-137165

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields...

Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2026-12538)

Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow an authenticated attacker to obtain sensitive information or cause a denial of service. Vulnerability Details CVEID:CVE-2026-12538 DESCRIPTION: IBM MQ could allow an authenticated attacker to obtain...