An XML external entity injection vulnerability (CVE-2026-12666) in IBM MQ Classes for Java allows authenticated attackers to perform denial-of-service attacks or disclose sensitive host information by manipulating MQRFH2 headers.
IBM MQ
vulnerability
java
middleware
cve-2026-12666
rce
dos
1t
1c
updated