Skip to content
Threat Feed
Subscribe

Product

IBM MQ

1 brief RSS
high advisory

XML External Entity Injection in IBM MQ Classes for Java

An XML external entity injection vulnerability (CVE-2026-12666) in IBM MQ Classes for Java allows authenticated attackers to perform denial-of-service attacks or disclose sensitive host information by manipulating MQRFH2 headers.

IBM MQ +1 vulnerability java middleware cve-2026-12666 rce dos
1t 1c updated