NetSight
medium6.5

CVE-2026-12155

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer de…

Impact

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference.

Affected products

VendorProductAffected versions
IbmMq Operator
from 2.0.0 through 2.0.29
from 3.2.0 through 3.2.29
Versions 3.3.0, 3.4.0, 3.4.1, 3.5.0
IbmSupplied Mq Advanced Container Images
Versions 9.4.1.0, 9.4.1.1, 9.4.2.0, 9.4.2.1, 9.4.3.0, 9.4.3.1

Weakness classification

References