All 3 CVE vulnerabilities found in Red Hat build of Quarkus 3.27.5.SP2, with AI-generated Chinese analysis, references, and POCs.
Vendor: Red Hat
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-87743 | Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security CWE-551 | 7.5 | High | 2026-09-18 |
| CVE-2026-87742 | Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering CWE-770 | 7.5 | High | 2026-09-17 |
| CVE-2026-81829 | Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver CWE-22 | 5.3 | Medium | 2026-09-17 |
All 3 known CVE vulnerabilities affecting Red Hat build of Quarkus 3.27.5.SP2 with full Chinese analysis, references, and POCs where available.