Veille CVE

Mardi 20 octobre 2026

7 CVE

Critique 0 Élevée 5 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM MQ Operator » ✕
  1. CVE-2026-12660 2.7 Faible

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.

  2. CVE-2026-11831 5.4 Moyenne

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request.

  3. CVE-2026-12665 8.1 Élevée

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.

  4. CVE-2026-12148 7.5 Élevée

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.

  5. CVE-2026-10574 8.8 Élevée

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties.

  6. CVE-2026-10572 8.8 Élevée

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.

  7. CVE-2026-10743 8.8 Élevée

    IBM MQ Operator · IBM MQ Advanced container images

    IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.