8.6
Élevée
CVE-2026-77874 IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection
Description
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Enterprise Build of Quarkus 3.33 | 3.33.1 → 3.33.3.SP1 | Pas de correctif indiqué |
| Enterprise Build of Quarkus 3.27 | 3.27.1 → 3.27.5.SP1 | Pas de correctif indiqué |
Autres CVE de Enterprise Build of Quarkus
Les 4 CVE de Enterprise Build of Quarkus →
CVE-2026-19625
When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1"…
5.3
Moyenne
CVE-2026-19651
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass…
7.4
Élevée
CVE-2026-16308
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a…
7.5
Élevée