CVE-2026-19651

IBM Enterprise Build of Quarkus versions 3.27.1 to 3.27.5 and 3.33.1 to 3.33.3 are vulnerable to an authorization bypass, which can be exploited by attackers through manipulation of URL query parameters. This flaw arises from improper handling of untrusted input, potentially allowing unauthorized access to sensitive resources. Organizations using these specific versions should prioritize remediation to mitigate the risk of unauthorized access.