CVE-2026-12660CWE-22path-traversal

CVE-2026-12660

Low · published October 19, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-10-19T21:17Z
Affected products (109)
ProductVersionsFixed in
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operator≥ 2.0.0, ≤ 2.0.29—
ibm/mq_operator≥ 3.2.0, ≤ 3.2.29—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/mq_operatorall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
ibm/supplied_mq_advanced_container_imagesall versions—
References (1)
https://www.ibm.com/support/pages/node/7292667 · [email protected]
EPSS history
Timeline
  • 21 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 19 OCT 16:40Z
    IBM MQ Path Traversal
    cvelistv5
  • 19 OCT 16:40Z
    IBM MQ Path Traversal
    cvelistv5