What’s Vulnerable › Vulnerabilities
CVE-2026-19651: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
- Severity: high (CVSS 7.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-08 · updated 2026-09-09
- Weakness: CWE-639
Description
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
Affected products
- IBM Enterprise Build of Quarkus: from 3.27.1 through 3.27.5; from 3.33.1 through 3.33.3
References
Get alerted when CVE-2026-19651 or the next vulnerability affects your stack