Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-19651

IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Description

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Enterprise Build of Quarkus

  • 3.27.1 to ≤ 3.27.5affected
  • 3.33.1 to ≤ 3.33.3affected

References