Data Exposure and Performance Degradation in Quarkus REST Data Panache by Red Hat
CVE-2026-94451

6.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Exploit Intelligence
Red Hat Build Of Quarkus
Vendor
CVE Published:
12 October 2026

What is CVE-2026-94451?

A vulnerability in Quarkus REST Data Panache occurs due to improper validation of user-provided sort parameters in certain REST endpoints. This flaw could allow malicious actors to extract sensitive information beyond their authorization or to overload the database with complex sorting tasks, potentially leading to significant system slowdown and denial of service incidents.

References

https://access.redhat.com/security/cve/CVE-2026-94451
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2537516
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.