SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-12728

HIGH · CVSS 8.8 EPSS 0.59%

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

IBM MQ versions 9.1 through 10.0 are vulnerable to a deserialization flaw that allows authenticated attackers to execute arbitrary code. This high-severity vulnerability poses significant risks to the integrity and confidentiality of systems utilizing affected versions. Organizations using these IBM MQ versions should prioritize remediation to mitigate potential exploitation.

CVE
CVE-2026-12728
Severity
HIGH
CVSS
8.8
EPSS
0.59%

Original NVD Description

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code due to a deserialization of untrusted data.