https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:00:41.867689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12354 CVE-2026-12354 — IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection 2026-10-07T04:00:41.868774+00:00

Affected: IBM MQ

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code on the application server due to improper validation of JNDI names in the Resource Adapter Installation Verification Test application.