CVE-2026-81829: Red Hat build of Quarkus 3.27.5.SP2 (exact versions not specified); +6 more affected products

Affected technology

Red Hat build of Quarkus 3.27.5.SP2 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Quarkus 3.33.3.SP2 · Exact affected versions not specified by the source
Red Hat

Exploit Intelligence · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apicurio Registry 3 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Quarkus · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform Expansion Pack · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker can force the application server to issue GET requests to arbitrary paths on the same origin as the configured key endpoint. Vendor/CNA’s CVSS 3.1 assessment (base score 5.3/10) rates confidentiality impact as low; integrity and availability impact as none.