Skip to content
Sign in
7.1 High

CVE-2026-12667 IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1…

Description

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to read files from a vulnerable .NET client or cause limited denial of service due to improper handling of XML external entities in RFH2 folder parsing.

Affected products and versions

Product Affected versions Fixed in
MQ 10.0.0.0 No fix stated
MQ 9.4 9.4.0.0 → latest No fix stated
MQ 9.3 9.3.0.0 → latest No fix stated
MQ 9.2 9.2.0.0 → latest No fix stated
MQ 9.1 9.1.0.0 → latest No fix stated

Other CVEs of MQ

The 117 CVEs of MQ →
CVE-2026-10859 IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability 7.5 High CVE-2026-11376 IBM MQ is affected by a denial of service vulnerability 8.8 High CVE-2026-11724 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability 8.5 High CVE-2026-12356 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability 7.5 High
Track this CVE