CPE
critical
advisory
Security Control Bypass in Quarkus REST Data Panache via @MethodProperties
1 CVEA code generation flaw in Quarkus REST Data Panache allows unauthenticated attackers to bypass class-level security requirements when using @MethodProperties without explicit role re-declaration.
Quarkus REST Data Panache
web-application-security
configuration-flaw
cve-2026-87744
1c
high
advisory
Denial of Service Vulnerability in Quarkus WebSockets Next
1 TTP 1 CVEA vulnerability in quarkus-websockets-next allows a remote attacker to cause a Denial of Service via heap exhaustion by streaming WebSocket messages faster than the application can process them.
Quarkus +1
denial-of-service
java
application-security
web-application
security-flaw
authorization-bypass
1t
1c
updated
high
advisory
Remote Code Execution in Quarkus via Qute Template Engine
2 TTPs 1 CVEThe Qute template engine in Quarkus fails to properly restrict access to sensitive Java internals, allowing an attacker to achieve remote code execution via template injection.
Quarkus
vulnerability
rce
java
2t
1c