high8.6
CVE-2026-77874
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection.
Impact
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Affected products
| Product | Affected versions |
|---|---|
| Quarkus 3.27.1 | through 3.27.5.SP1 |
| And 3.33.1 | through 3.33.3.SP1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.