Known vulnerabilities in Enterprise Build of Quarkus

Vendor: IBM Corporation
Software: Enterprise Build of Quarkus
Software CPE: cpe:2.3:a:ibm_corporation:enterprise_build_of_quarkus:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Enterprise Build of Quarkus Enterprise Build of Quarkus is affected by 14 known vulnerabilities: 1 high, 12 medium, 1 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134739 - Improper Resolution of Path Equivalence
CVE-2026-50559		 CWE-41 Medium
No
No
 3.27.4.SP1, 3.33.2.SP1 17.06.2026 SB2026061748
SB2026061772
SB2026062438
#VU130215 - Resource exhaustion
CVE-2026-42587		 CWE-400 Medium
No
No
 3.27.4 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 10 more
#VU130214 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42581		 CWE-444 Medium
No
No
 3.27.4 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 10 more
#VU130211 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42580		 CWE-444 Medium
No
No
 3.27.4 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 4 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585		 CWE-444 Medium
No
No
 3.27.4 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 11 more
#VU130208 - Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579		 CWE-626 Medium
No
No
 3.27.4 05.05.2026 SB20260505124
SB2026060936
SB2026060963
and 6 more
#VU130205 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42584		 CWE-444 Medium
No
No
 3.27.4 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 11 more
#VU129871 - Improper Access Control
CVE-2026-39852		 CWE-284 High
No
No
 3.27.1.SP1 05.05.2026 SB2026050573
SB2026050719
SB2026052540
and 2 more
#VU122774 - Missing Release of Resource after Effective Lifetime
CVE-2025-14969		 CWE-772 Low
No
No
 3.27.2 12.02.2026 SB2026021248
SB2026021249
#VU121068 - Resource Management Errors
CVE-2025-66560		 CWE-399 Medium
No
No
 3.27.2 07.01.2026 SB2026010775
SB2026021249
SB2026032411
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 3.27.1.SP1 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU121006 - Out-of-bounds read
CVE-2025-12183		 CWE-125 Medium
No
No
 3.27.1.SP1 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more
#VU119966 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-67735		 CWE-93 Medium
No
No
 3.27.2 15.12.2025 SB2025121552
SB2025121974
SB2026012079
and 21 more
#VU117375 - Information Exposure Through Timing Discrepancy
CVE-2025-59432		 CWE-208 Medium
No
No
 3.27.2 20.10.2025 SB2025102016
SB2025102026
SB2025102027
and 6 more