Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-2607

IBM MQ Operator SC2: v3.2.0 through 3.2.23CD:  v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29 and IBM supplied MQ Advanced container images SC2: 9.4.0.6 through r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:177e828566e050404f7a1cd32f85842f0653faa1e9b7a3292a1c9b4f61337829
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"cpes":["cpe:2.3:a:ibm:mq_operator:sc2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq_operator:3.2.23:cd:*:*:*:*:*:*:*"],"product":"MQ Operator","vendor":"IBM","versions":[{"lessThanOrEqual":"3.2.23CD:  v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29","status":"affected","version":"SC2: v3.2.0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/affected/0

{"cpes":["cpe:2.3:a:ibm:supplied_mq_advanced_container_images:sc2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:supplied_mq_advanced_container_images:r1:*:*:*:*:*:*:*"],"product":"supplied MQ Advanced container images","vendor":"IBM","versions":[{"lessThanOrEqual":"r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"cpes":["cpe:2.3:a:ibm:mq_operator:sc2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq_operator:3.2.23:cd:*:*:*:*:*:*:*"],"product":"MQ Operator","vendor":"IBM","versions":[{"lessThanOrEqual":"3.2.23CD:  v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6.0 - v3.6.4, v3.7.0 - v3.7.2, v3.8.0, v3.8.1, v3.9.0, v3.9.1LTS: v2.0.0 - 2.0.29","status":"affected","version":"SC2: v3.2.0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/affected/0
{"cpes":["cpe:2.3:a:ibm:supplied_mq_advanced_container_images:sc2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:supplied_mq_advanced_container_images:r1:*:*:*:*:*:*:*"],"product":"supplied MQ Advanced container images","vendor":"IBM","versions":[{"lessThanOrEqual":"r1, 9.4.0.6-r2, 9.4.0.7-r1, 9.4.0.10-r1, 9.4.0.10-r2, 9.4.0.11-r1, 9.4.0.11-r2, 9.4.0.11-r3, 9.4.0.12-r1, 9.4.0.15-r1 - 9.4.0.15-r4, 9.4.0.16-r1, 9.4.0.16-r2, 9.4.0.17-r1, 9.4.0.17-r2, 9.4.0.20-r1CD: 9.4.1.0-r1, 9.4.1.0-r2, 9.4.1.1-r1, 9.4.2.0-r1, 9.4.2.0-r2, 9.4.2.1-r1, 9.4.2.1-r2, 9.4.3.0-r1, 9.4.3.0-r2, 9.4.3.1-r1 - 9.4.3.1-r3, 9.4.4.0-r1 - 9.4.…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-532","description":"CWE-532 Insertion of Sensitive Information into Log File","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7273145"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:af1858862e320b35f1f52602cb1683a2fb670985b4ffe8c0b48f40010c9e8f80 · sha256:83cc490b33ba3bd8… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer