MEDIUM 5.4 NVD

CVE-2026-12538

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields.

References

https://www.ibm.com/support/pages/node/7293035

Published: 2026-11-04 · Source: NVD · Feed updated: 2026-11-05

This medium severity vulnerability with a CVSS score of 5.4 was published on 2026-11-04 via NVD.

vulnfeed aggregates 16578 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.