CVE-2026-19651 — IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

CVE-2026-19651

IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.

Affected (CNA)

Vendor / product	Versions
IBM / Enterprise Build of Quarkus	affected 3.27.1 through 3.27.5; affected 3.33.1 through 3.33.3

CWE

CWE-639

References

https://www.ibm.com/support/pages/node/7286498

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.