NetSight
medium6.5

CVE-2026-12350

IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue ma…

Impact

IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process.

Affected products

VendorProductAffected versions
IbmMq Operator
from 2.0.0 through 2.0.29
from 3.2.0 through 3.2.29
Versions 3.3.0, 3.4.0, 3.4.1, 3.5.0
IbmSupplied Mq Advanced Container Images
Versions 9.4.1.0, 9.4.1.1, 9.4.2.0, 9.4.2.1, 9.4.3.0, 9.4.3.1

Weakness classification

References