CVE-2026-12669: ibm mq_operator, ibm supplied_mq_advanced_container_images

CVSS 4.3 (medium) · published 2026-10-19

IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.

Affected products (NVD): ibm mq_operator, ibm supplied_mq_advanced_container_images

Weakness: CWE-125

Source: NVD CVE-2026-12669

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.