Is CVE-2026-12538 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-12538?

CVE-2026-12538 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-12538

Description

IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header structure length fields.