high7.4
CVE-2026-19651
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query para…
Impact
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
Affected products
| Product | Affected versions |
|---|---|
| Quarkus 3.27.1 | through 3.27.5 |
| And 3.33.1 | through 3.33.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.