IBM MQ Authenticated DoS via Excessive Memory Ops in Charset Conversion
CVE-2026-12670 Published on October 19, 2026

IBM MQ Denial of Service
IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-12670 is exploitable with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

Incorrect Conversion between Numeric Types

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.


Products Associated with CVE-2026-12670

stack.watch emails you whenever new vulnerabilities are published in IBM Mq Operator or IBM Mq Advanced Container Images. Just hit a watch button to start following.

IBM Mq Operator
 
IBM Mq Advanced Container Images
 

Affected Versions

IBM MQ Operator: IBM MQ Advanced container images: