CVE-2026-12665

Ibm Mq Operator: stack buffer overflow can lead to remote code execution

Risk score: 67/100
CVSS: 9.8 v3.1
Exploit chance (30 days): 0.3%
Published: 19 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: IBM MQ has a stack buffer overflow vulnerability when processing TLS certificates with malformed distinguished names, allowing a remote attacker to execute arbitrary code.
Affected: {'product': 'IBM MQ', 'package': 'N/A', 'version': 'N/A'}
Fix: Check the linked advisory for details on the fix.
Exploitation: No known exploitation

Why it is Amber

CVSS 9.8 critical
Remotely exploitable without logging in

References

https://www.ibm.com/support/pages/node/7292667

Original description

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.

Last activity 19 Oct 2026. Patch Forecast updates every hour.