CVE-2026-12150

HIGHCVSS 7.0

Description

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker with a trusted TLS client certificate to cause a denial of service and potentially affect memory contents due to improper validation of deeply nested certificate data during TLS certificate processing.

Timeline

Published:September 15th, 2026 6:17 PM

Last modified:September 16th, 2026 7:22 PM

CVSS Scoring

CVSS v3: 7.0 (HIGH)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Weaknesses (CWE)

CWE-121

References & Reports

Advisories, patches, and third-party reports

https://www.ibm.com/support/pages/node/7284911

Source: NIST NVD · Data may lag official sources by up to one minute