IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.
History

Fri, 23 Oct 2026 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Ibm supplied Mq Advanced Container Images
CPEs cpe:2.3:a:ibm:mq_operator:*:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_operator:*:*:*:*:sc2:*:*:*
cpe:2.3:a:ibm:mq_operator:3.3.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.4.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.4.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.5.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.5.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.5.2:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.5.3:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.6.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.6.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.6.2:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.6.3:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.6.4:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.7.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.7.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.7.2:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.8.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.8.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.9.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.9.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.9.2:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.2:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.3:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.4:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r3:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.0:r4:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:10.0.0.5:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.0:r3:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.10:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.10:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.11:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.11:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.15:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.16:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.16:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.17:r3:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r3:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.1:r4:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.20:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.20:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.21:r3:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.25:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.3:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.4:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.4:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.5:r3:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.3.0.6:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.0:r3:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.10:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.10:r2:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r2:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.11:r3:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.12:*:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.12:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.15:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.15:r4:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.16:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.16:r2:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.17:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.17:r2:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.20:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.21:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.21:r2:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.25:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.25:r3:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.26:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.5:r1:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.5:r2:*:*:lts:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.6:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.6:r2:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.0.7:r1:*:*:sc2:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.0:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.0:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.1.1:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.0:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.0:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.1:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.2.1:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.0:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.0:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.3.1:r3:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r3:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.0:r4:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.4.1:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.0:r1:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.0:r2:*:*:cd:*:*:*
cpe:2.3:a:ibm:supplied_mq_advanced_container_images:9.4.5.1:r1:*:*:cd:*:*:*
Vendors & Products Ibm supplied Mq Advanced Container Images

Mon, 19 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
Description IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.
Title IBM MQ Deserialization of Untrusted Data
First Time appeared Ibm
Ibm mq Advanced Container Images
Ibm mq Operator
Weaknesses CWE-502
CPEs cpe:2.3:a:ibm:mq_advanced_container_images:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:10.0.0.5-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.0-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.1-r4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.10-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.11-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.15-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.16-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.17-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.20-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.21-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.25-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.3-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.4-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.5-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.3.0.6-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.0-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.10-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.11-r3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.12-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.16-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.17-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.20-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.21-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.26-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.5-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.6-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.0.7-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.0-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.1.1-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.0-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.2.1-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.3.0-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.4.1-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.0-r2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_advanced_container_images:9.4.5.1-r1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.9.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.9.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:3.9.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:mq_operator:4.0.4:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm mq Advanced Container Images
Ibm mq Operator
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-10-19T16:40:55.117Z

Updated: 2026-10-20T12:58:09.900Z

Reserved: 2026-06-12T18:00:59.730Z

Link: CVE-2026-12148

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-10-19T17:17:17.120

Modified: 2026-10-23T21:00:54.453

Link: CVE-2026-12148

cve-icon Redhat

No data.