Red Hat build of Quarkus 3.27.6.redhat — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Red Hat build of Quarkus 3.27.6.redhat, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-87744	Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations CWE-425	9.1	Critical	2026-10-12
CVE-2026-94451	Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache CWE-20	6.5	Medium	2026-10-12
CVE-2026-94449	Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service CWE-400	7.5	High	2026-09-21
CVE-2026-93432	Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus CWE-79	6.1	Medium	2026-09-18

All 4 known CVE vulnerabilities affecting Red Hat build of Quarkus 3.27.6.redhat with full Chinese analysis, references, and POCs where available.