CVE-2026-12150

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ version 10.0.0.0

Description A remote attacker possessing a trusted TLS client certificate can cause a denial of service and potentially impact memory contents. This occurs due to improper validation of deeply nested certificate data during the processing of TLS certificates.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.