← All advisories

Important severity7.5NVD Advisory· Published Jun 17, 2026

io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters

CVE-2026-50559

Description

io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters

Affected products

14

Quarkusio/Quarkusllm-fuzzy
osv-coords13 versions
pkg:apk/chainguard/apicurio-registry pkg:apk/chainguard/floci-az pkg:apk/chainguard/hono-adapter-mqtt pkg:apk/chainguard/hono-service-auth pkg:apk/chainguard/hono-service-command-router pkg:apk/chainguard/hono-service-device-registry-jdbc pkg:apk/chainguard/keycloak-fips-26.7 pkg:apk/chainguard/keycloak-fips-26.7-iamguarded-fips pkg:apk/chainguard/keycloak-fips-26.7-operator pkg:apk/chainguard/request-9047-keycloak-fips-26.5 pkg:apk/chainguard/request-9047-keycloak-fips-26.5-iamguarded-fips pkg:apk/chainguard/request-9047-keycloak-fips-26.5-operator pkg:apk/wolfi/apicurio-registry
< 3.3.1-r0+ 12 more
- (no CPE)range: < 3.3.1-r0
- (no CPE)range: < 0.9.0-r4
- (no CPE)range: < 2.7.0-r35
- (no CPE)range: < 2.7.0-r35
- (no CPE)range: < 2.7.0-r35
- (no CPE)range: < 2.7.0-r35
- (no CPE)range: < 26.7.0-r7
- (no CPE)range: < 26.7.0-r7
- (no CPE)range: < 26.7.0-r7
- (no CPE)range: < 26.5.7-r19
- (no CPE)range: < 26.5.7-r19
- (no CPE)range: < 26.5.7-r19
- (no CPE)range: < 3.3.1-r0

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.