CVE Feed

    Dashboard / CVE / CVE-2026-12665

    CVE-2026-12665

    IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.

    Published:Oct 19, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 19, 2026
    EPSS Score:0.00249
    CVSS Score:8.1

    Affected Products

    Vendor
    Ibm
    Product
    Mq Advanced Container Images
    Vendor
    Ibm
    Product
    Mq Operator
    Vendor
    Ibm
    Product
    Supplied Mq Advanced Container Images

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-10572 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10574 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10743 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va…
    CVE-2026-11828 (CVSS 5.9) — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha…
    CVE-2026-11829 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset…
    CVE-2026-11831 (CVSS 5.4) — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info…
    CVE-2026-12148 (CVSS 7.5) — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi…
    CVE-2026-12155 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica…
    CVE-2026-12343 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m…
    CVE-2026-12350 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High