CVE-2026-12355

HIGHCVSS 8.1

Description

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation, potentially leading to information disclosure or remote code execution.

Timeline

Published:September 15th, 2026 6:17 PM

Last modified:September 16th, 2026 7:21 PM

CVSS Scoring

CVSS v3: 8.1 (HIGH)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-74

References & Reports

Advisories, patches, and third-party reports

https://www.ibm.com/support/pages/node/7284912

Source: NIST NVD · Data may lag official sources by up to one minute