← CVE Intelligence

CVE-2026-77874

IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

Affected (CNA)

Vendor / productVersions
IBM / Enterprise Build of Quarkusaffected 3.27.1 through 3.27.5.SP1; affected 3.33.1 through 3.33.3.SP1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.