CVE-2026-12550

EUVD-2026-117071
IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message selection parameters.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ibmCNA
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
ibmmq
9.2.0.0 ≤
𝑥
≤ 9.2.0.44
CNA
ibmmq
9.3.0.0 ≤
𝑥
≤ 9.3.0.42
CNA
ibmmq
9.4.0.0 ≤
𝑥
≤ 9.4.0.26
CNA
ibmmq
9.4.0.0 ≤
𝑥
≤ 9.4.5.1
CNA
ibmmq
10.0.0.0 ≤
𝑥
≤ 10.0.0.5
CNA