[ CVE-2026-77874 · Published 24 Sep 2026 ]
Vulnerability in IBM Enterprise Build of Quarkus
CVSS 8.6
EPSS <1%No fix listed yet
[ Description ]Official description
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.