CVE-2026-12148 — IBM MQ Deserialization of Untrusted Data
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Class…
Published: 2026-10-19 · CVSS: 7.5 · CVSS 3.1
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7