CVE-2026-12351

CRITICAL · 9.8

No AI summary yet — the auto-summarizer runs every 10 minutes for top trending CVEs.

Description

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute arbitrary code due to unsafe JNDI lookup processing when the IVT application is deployed.

CVSS 3.1 breakdown

Exploitability 3.9 · Impact 5.9

vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Weaknesses

CWE-74

References

Other · 1

https://www.ibm.com/support/pages/node/7284541