low2.7
CVE-2026-12660
IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.
Impact
IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Mq Operator | from 2.0.0 through 2.0.29 from 3.2.0 through 3.2.29 Versions 3.3.0, 3.4.0, 3.4.1, 3.5.0 |
| Ibm | Supplied Mq Advanced Container Images | Versions 9.4.1.0, 9.4.1.1, 9.4.2.0, 9.4.2.1, 9.4.3.0, 9.4.3.1 |