CVE Feed

    Dashboard / CVE / CVE-2026-12727

    CVE-2026-12727

    IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.

    Published:Oct 19, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 19, 2026
    EPSS Score:0.00215
    CVSS Score:4.3

    Affected Products

    Vendor
    Ibm
    Product
    Mq Advanced Container Images
    Vendor
    Ibm
    Product
    Mq Operator
    Vendor
    Ibm
    Product
    Supplied Mq Advanced Container Images

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-193 Off-by-one Error

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-10572 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10574 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary cod…
    CVE-2026-10743 (CVSS 8.8) — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper va…
    CVE-2026-11828 (CVSS 5.9) — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha…
    CVE-2026-11829 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset…
    CVE-2026-11831 (CVSS 5.4) — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited info…
    CVE-2026-12148 (CVSS 7.5) — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbi…
    CVE-2026-12155 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multica…
    CVE-2026-12343 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 m…
    CVE-2026-12350 (CVSS 6.5) — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted async…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High