Is CVE-2026-19651 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19651?

CVE-2026-19651 has a CVSS v3 severity of HIGH (7.4).

Back

CVE-2026-19651

Description

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.