CVE-2026-12666 in IBM

Resumen

por MITRE • 2026-09-15

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 Classes for Java could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to XML external entity injection in MQRFH2 header processing.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Ibm
• Reservar: 2026-06-18
• Divulgación: 2026-09-15
• Moderación: aceptado
• Artículo: VDB-404426
• CPE: listo
• CWE: CWE-611 (confirmado)
• CVSS: 8.1 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-12666
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-12666
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-12666/