CVE-2026-12665
Received Received - Intake

Stack Buffer Overflow in IBM MQ via TLS Certificate Handling

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: IBM Corporation

Description
IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-12665
EUVD
EUVD-2026-104465

Affected Vendors & Products

Showing 89 associated CPEs
Vendor Product Version / Range
IBM MQ Operator 3.2.0
IBM MQ Operator 3.3.0
IBM MQ Operator 3.4.1
IBM MQ Operator 3.5.0
IBM MQ Operator 3.5.1
IBM MQ Operator 3.6.0
IBM MQ Operator 3.7.0
IBM MQ Operator 3.8.0
IBM MQ Operator 3.8.1
IBM MQ Operator 3.9.0
IBM MQ Operator 3.9.1
IBM MQ Operator 3.9.2
IBM MQ Operator 4.0.0
IBM MQ Operator 4.0.1
IBM MQ Operator 4.0.2
IBM MQ Operator 4.0.3
IBM MQ Operator 4.0.4
IBM MQ Operator 2.0.0
IBM MQ Advanced container images 9.4.0.6-r1
IBM MQ Advanced container images 9.4.0.6-r2
IBM MQ Advanced container images 9.4.0.7-r1
IBM MQ Advanced container images 9.4.0.10-r1
IBM MQ Advanced container images 9.4.0.10-r2
IBM MQ Advanced container images 9.4.0.11-r1
IBM MQ Advanced container images 9.4.0.11-r2
IBM MQ Advanced container images 9.4.0.11-r3
IBM MQ Advanced container images 9.4.0.12-r1
IBM MQ Advanced container images 9.4.0.15-r1
IBM MQ Advanced container images 9.4.0.16-r1
IBM MQ Advanced container images 9.4.0.16-r2
IBM MQ Advanced container images 9.4.0.17-r1
IBM MQ Advanced container images 9.4.0.17-r2
IBM MQ Advanced container images 9.4.0.20-r1
IBM MQ Advanced container images 9.4.0.21-r1
IBM MQ Advanced container images 9.4.0.21-r2
IBM MQ Advanced container images 9.4.0.25-r1
IBM MQ Advanced container images 9.4.0.26-r1
IBM MQ Advanced container images 9.4.1.0-r1
IBM MQ Advanced container images 9.4.1.0-r2
IBM MQ Advanced container images 9.4.1.1-r1
IBM MQ Advanced container images 9.4.2.0-r1
IBM MQ Advanced container images 9.4.2.0-r2
IBM MQ Advanced container images 9.4.2.1-r1
IBM MQ Advanced container images 9.4.2.1-r2
IBM MQ Advanced container images 9.4.3.0-r1
IBM MQ Advanced container images 9.4.3.0-r2
IBM MQ Advanced container images 9.4.3.1-r1
IBM MQ Advanced container images 9.4.4.0-r1
IBM MQ Advanced container images 9.4.4.1-r1
IBM MQ Advanced container images 9.4.5.0-r1
IBM MQ Advanced container images 9.4.5.0-r2
IBM MQ Advanced container images 9.4.5.1-r1
IBM MQ Advanced container images 10.0.0.0-r1
IBM MQ Advanced container images 10.0.0.5-r1
IBM MQ Advanced container images 9.3.0.0-r1
IBM MQ Advanced container images 9.3.0.0-r2
IBM MQ Advanced container images 9.3.0.0-r3
IBM MQ Advanced container images 9.3.0.1-r1
IBM MQ Advanced container images 9.3.0.1-r2
IBM MQ Advanced container images 9.3.0.1-r3
IBM MQ Advanced container images 9.3.0.1-r4
IBM MQ Advanced container images 9.3.0.3-r1
IBM MQ Advanced container images 9.3.0.4-r1
IBM MQ Advanced container images 9.3.0.4-r2
IBM MQ Advanced container images 9.3.0.5-r1
IBM MQ Advanced container images 9.3.0.5-r2
IBM MQ Advanced container images 9.3.0.5-r3
IBM MQ Advanced container images 9.3.0.6-r1
IBM MQ Advanced container images 9.3.0.10-r1
IBM MQ Advanced container images 9.3.0.10-r2
IBM MQ Advanced container images 9.3.0.11-r1
IBM MQ Advanced container images 9.3.0.11-r2
IBM MQ Advanced container images 9.3.0.15-r1
IBM MQ Advanced container images 9.3.0.16-r1
IBM MQ Advanced container images 9.3.0.16-r2
IBM MQ Advanced container images 9.3.0.17-r1
IBM MQ Advanced container images 9.3.0.17-r2
IBM MQ Advanced container images 9.3.0.17-r3
IBM MQ Advanced container images 9.3.0.20-r1
IBM MQ Advanced container images 9.3.0.20-r2
IBM MQ Advanced container images 9.3.0.21-r1
IBM MQ Advanced container images 9.3.0.21-r2
IBM MQ Advanced container images 9.3.0.21-r3
IBM MQ Advanced container images 9.3.0.25-r1
IBM MQ Advanced container images 9.4.0.0-r1
IBM MQ Advanced container images 9.4.0.0-r2
IBM MQ Advanced container images 9.4.0.0-r3
IBM MQ Advanced container images 9.4.0.5-r1
IBM MQ Advanced container images 9.4.0.5-r2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack buffer overflow in IBM MQ that occurs when processing TLS certificates with malformed distinguished names during channel connection establishment. It allows a remote attacker to execute arbitrary code by exploiting the overflow.

Impact Analysis

An attacker could exploit this to run malicious code on the affected IBM MQ system, potentially leading to unauthorized access, data breaches, or system compromise. The high CVSS score indicates significant risk.

Mitigation Strategies

Apply the latest IBM MQ security patches or updates as soon as they are available to address the stack buffer overflow issue in TLS certificate processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12665. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart