Known vulnerabilities in Red Hat build of Quarkus - page 2

Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_quarkus:*:*:*:*:*:*:*:*
Total vulnerabilities: 89
Public exploits: 7
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Quarkus Red Hat build of Quarkus is affected by 89 known vulnerabilities: 17 high, 61 medium, 11 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513
CWE-184 High
No
No
3.27.4.SP2, 3.33.2.SP2 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515
CWE-915 Medium
No
No
3.27.4.SP2, 3.33.2.SP2 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 18 more
#VU139155 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54516
CWE-915 Medium
No
No
3.27.4.SP2, 3.33.2.SP2 22.07.2026 SB2026072278
SB2026072282
SB2026072340
and 9 more
#VU135688 - Comparison using wrong factors
CVE-2026-9800
CWE-1025 Medium
No
No
3.27.4.SP2, 3.33.2.SP2 29.06.2026 SB2025031143
SB2026083155
SB2026083156
and 1 more
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
3.20.6.SP1, 3.27.3.SP1 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
3.20.6.SP1, 3.27.3.SP1 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
3.20.6.SP1, 3.27.3.SP1 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 18 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554
CWE-362 High
No
No
3.27.3.SP1 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU129871 - Improper Access Control
CVE-2026-39852
CWE-284 High
No
No
3.20.6.SP1, 3.27.3.SP1 05.05.2026 SB2026050573
SB2026050719
SB2026052540
and 2 more
#VU128414 - Allocation of Resources Without Limits or Throttling
CVE-2026-42198
CWE-770 Medium
No
No
3.27.3.SP2 28.04.2026 SB20260428236
SB2026052067
SB2026052092
and 25 more
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566
CWE-200 Medium
No
No
3.20.4.SP1, 3.27.1.SP1 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU121006 - Out-of-bounds read
CVE-2025-12183
CWE-125 Medium
No
No
3.20.4.SP1, 3.27.1.SP1 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more
#VU119089 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-64518
CWE-611 High
No
No
3.20.4 03.12.2025 SB2025120316
SB2025120355
SB2025120424
and 1 more
#VU117611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-11966
CWE-79 Low
No
No
3.27.1.SP1 23.10.2025 SB2025102374
SB2025121725
SB2026010706
and 3 more
#VU114761 - Resource exhaustion
CVE-2025-58057
CWE-400 Medium
No
No
3.15.7, 3.20.3 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 47 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056
CWE-444 Medium
No
No
3.15.7, 3.20.3 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU114026 - Resource exhaustion
CVE-2025-55163
CWE-400 Medium
No
No
3.15.6.SP1, 3.20.2.SP1 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU106935 - Exposure of sensitive information to an unauthorized actor
CVE-2025-1247
CWE-200 Low
No
No
3.15.3.SP1 03.04.2025 SB2025040340
SB2025070708
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
3.15.3.SP1 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU52578 - Improper input validation
CVE-2017-18640
CWE-20 Medium
No
No
1.3.4 26.04.2021 SB2021042616
SB2021081922
SB2021060732
and 20 more


Showing elements 21 - 40 out of 89