CVE-2026-12728

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.0.37 LTS IBM MQ versions 9.2.0.0 through 9.2.0.43 LTS IBM MQ versions 9.3.0.0 through 9.3.0.41 LTS IBM MQ versions 9.3.0.0 through 9.3.5.1 CD IBM MQ versions 9.4.0.0 through 9.4.0.25 LTS IBM MQ versions 9.4.0.0 through 9.4.5.1 CD IBM MQ version 10.0.0.0

Description An authenticated attacker can execute arbitrary code due to the deserialization of untrusted data. Deserialization is the process of converting a data stream back into an object, which can be exploited if the input is not properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.