CVSS 6.5 (medium) · published 2026-10-19
IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations.
Affected products (NVD): ibm mq_operator, ibm supplied_mq_advanced_container_images
Weakness: CWE-400
Source: NVD CVE-2026-12343
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.