Red Hat Exploit Intelligence

• CVE-2026-107912 High 7.7 Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw 0.2%
• CVE-2026-114236 Low 3.3 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers 0.1%
• CVE-2026-87744 Critical 9.1 Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations 0.4%
• CVE-2026-94451 Medium 6.5 Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache 0.3%
• CVE-2026-94449 High 7.5 Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service 1.1%
• CVE-2026-93432 Medium 6.1 Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus 1.2%
• CVE-2026-87743 High 7.5 Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security 0.5%
• CVE-2026-87742 High 7.5 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering 0.8%
• CVE-2026-81829 Medium 5.3 Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver 0.6%