CVE-2026-19651highCWE-639

CVE-2026-19651: high-severity vulnerability in IBM Enterprise Build of Quarkus

IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Published · Updated

Follow this CVE+ Monitor Enterprise Build of Quarkus

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 0.3%
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
IBM · Enterprise Build of Quarkus
Related CVEs — IBM Enterprise Build of Quarkus

In the same product, most dangerous first.

CVE-2026-16308HIGHIBM Enterprise Build of Quarkus is affected by a DoS vulnerabilityEPSS 0.5%CVE-2026-19625MEDIUMIBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2026-77874HIGHIBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesEPSS 0.3%