Is CVE-2026-12148 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-12148?

CVE-2026-12148 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-12148

Description

IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.