← CVE Radar
CVE-2026-12538IBM MQ Appliance is affected by an improper validation vulnerability
IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields.
5.4 MEDIUMEPSS 0.33%Not in KEVNVD: Undergoing Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.4 | MEDIUM | 3.1ibm (CNA) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L |
Details
- CVE ID
- CVE-2026-12538
- Status
- Undergoing Analysis
- Assigner (CNA)
- ibm
- Published
- Nov 4, 2026
- Last modified
- 2026-11-04 21:18 UTC
- Weaknesses
- CWE-124 · Buffer Underwrite ('Buffer Underflow')
Affected Products
As published by the CNA in the CVE record.
IBMMQ Appliance3 version ranges
- 9.4.0.0 through 9.4.0.26
- 9.4.1.0 through 9.4.5.3
- 10.0.0.1 through 10.0.0.5