CVE-2026-19651
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
- State
- Published
- Severity
- 7.4 High
- Published
- Sep 8, 2026
- Updated
- Sep 9, 2026
- Reserved
- Aug 12, 2026
Description
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.4 High | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | ibm |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
Enterprise Build of QuarkusIBM |
|
References
- https://www.ibm.com/support/pages/node/7286498vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.