High 8.1Published Oct 19, 2026

CVE-2026-12665IBM MQ Buffer Overflow

Updated under an hour ago (Oct 27, 2026, 5:20 AM ET)

Does this affect you?

It affects IBM MQ Operator and 2 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.26%, higher than 16% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for IBM MQ Operator

Exploited in the last 30 days

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-121
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.26% (percentile 16)
Assigned by: ibm
NVD analysis: Analyzed
Record last updated: Oct 20, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

IBM MQ Operator ibm:mq_operator (from the name)	from 3.2.0 through 3.2.29; from 3.3.0 before 3.4.0; 3.4.1; 3.5.0; from 3.5.1 through 3.5.3; from 3.6.0 through 3.6.4; from 3.7.0 through 3.7.2; 3.8.0; and 10 more ranges	CNA record
IBM MQ Advanced container images ibm:mq_advanced_container_images (from the name)	from 9.4.0.6-r1 through r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1, 9.4.0.21-r1, 9.4.0.21-r2, 9.4.0.25-r1 - 9.4.0.25-r3, 9.4.0.26-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.4.0-r4, 9.4.4.1-r1, 9.4.5.0-r1, 9.4.5.0-r2, 9.4.5.1-r1, 10.0.0.0-r1 - 10.0.0.0-r4, 10.0.0.5-r1LTS: 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2, 9.3.0.17-r3, 9.3.0.20-r1, 9.3.0.20-r2, 9.3.0.21-r1, 9.3.0.21-r2, 9.3.0.21-r3, 9.3.0.25-r1, 9.4.0.0-r1, 9.4.0.0-r2, 9.4.0.0-r3, 9.4.0.5-r1, 9.4.0.5-r2; 9.4.0.6-r2; 9.4.0.7-r1; 9.4.0.10-r1; 9.4.0.10-r2; 9.4.0.11-r1; 9.4.0.11-r2; 9.4.0.11-r3; and 63 more ranges	CNA record
ibm mq_operator ibm:mq_operator	from 2.0.0 through 2.0.29; from 3.2.0 through 3.2.29; 3.3.0; 3.4.0; 3.4.1; 3.5.0; 3.5.1; 3.5.2; and 19 more ranges	NVD
ibm supplied_mq_advanced_container_images ibm:supplied_mq_advanced_container_images	9.4.1.0; 9.4.1.0; 9.4.1.1; 9.4.2.0; 9.4.2.0; 9.4.2.1; 9.4.2.1; 9.4.3.0; and 74 more ranges	NVD

References

References

https://www.ibm.com/support/pages/node/7292667	vendor-advisory, patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.