High severity8.6NVD Advisory· Published Sep 24, 2026· Updated Sep 24, 2026
CVE-2026-77874
CVE-2026-77874
Description
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 3.27.1 - 3.27.5.SP1, 3.33.1 - 3.33.3.SP1
Patches
Vulnerability mechanics
References
1News mentions
1- IBM DataStage: 25 High/Critical CVEs Disclosed Together, Enabling Code Execution and Data LeakageVypr Intelligence · Sep 24, 2026