← CVE Radar
CVE-2026-14252IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred utility
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentially sensitive information in log files that could be read by a local user.
6.2 MEDIUMEPSS 0.12%Not in KEVNVD: Undergoing Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.2 | MEDIUM | 3.1ibm (CNA) | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Details
- CVE ID
- CVE-2026-14252
- Status
- Undergoing Analysis
- Assigner (CNA)
- ibm
- Published
- Nov 4, 2026
- Last modified
- 2026-11-08 02:16 UTC
- Weaknesses
- CWE-532 · Insertion of Sensitive Information into Log File
Affected Products
As published by the CNA in the CVE record.
IBMMQ5 version ranges
- 9.2.0.0 through 9.2.0.44
- 9.3.0.0 through 9.3.0.42
- 9.4.0.0 through 9.4.0.26
- 9.4.0.0 through 9.4.5.1
- 10.0.0.0 through 10.0.0.5