cbcvebase.
CVE-2026-12660
published 2026-10-19

CVE-2026-12660: IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.

PriorityP412low2.7CVSS 3.1
AVNACLPRHUINSUCNILAN
EPSS
0.24%
14.2th percentile
IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.

Affected

89 ranges· showing 25
VendorProductVersion rangeFixed in
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
ibmmq_advanced_container_images——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.