CVE-2026-12727
published 2026-10-19CVE-2026-12727: IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted…
PriorityP422medium4.3CVSS 3.1
AVNACLPRLUINSUCNINAL
EPSS
0.21%
11.3th percentile
IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.
Affected
89 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
| ibm | mq_advanced_container_images | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.
ghsa_unreviewed·2026-10-19
CVE-2026-12727 [MEDIUM] CWE-193 IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.
IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.
VulDB
IBM MQ Operator/MQ Advanced container images off-by-one (EUVD-2026-104463)
vuldb·2026-10-19·CVSS 4.3
CVE-2026-12727 [MEDIUM] IBM MQ Operator/MQ Advanced container images off-by-one (EUVD-2026-104463)
A vulnerability, which was classified as critical, has been found in IBM MQ Operator and MQ Advanced container images. Affected is an unknown function. The manipulation leads to off-by-one.
This vulnerability is referenced as CVE-2026-12727. Remote exploitation of the attack is possible. No exploit is available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-19
Published