https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:10:45.417033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261495 EUVD-2026-261495 2026-10-07T03:10:45.551146+00:00 EUVD-2026-261495 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5675 fkie_cve-2023-5675 2026-10-07T03:10:45.551199+00:00

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either 'quarkus.security.jaxrs.deny-unannotated-endpoints' or 'quarkus.security.jaxrs.default-roles-allowed' properties.

 https://cve.radiocsirt.org/vuln/ghsa-25w4-hfqg-4r52 GHSA-25w4-hfqg-4r52 — Quarkus: authorization flaw in quarkus resteasy reactive and classic 2026-10-07T03:10:45.551269+00:00

Affected: Maven: io.quarkus:quarkus-resteasy-reactive-common-deployment, Maven: io.quarkus:quarkus-resteasy-reactive-common

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either 'quarkus.security.jaxrs.deny-unannotated-endpoints' or 'quarkus.security.jaxrs.default-roles-allowed' properties.

While backports of this fix exist in versions 3.6.9 and 3.7.1 users of older versions are encouraged to update to the 3.8.x LTS branch.

 https://cve.radiocsirt.org/vuln/gsd-2023-5675 gsd-2023-5675 2026-10-07T03:10:45.551306+00:00 gsd-2023-5675 https://cve.radiocsirt.org/vuln/rhsa-2024:0494 RHSA-2024:0494 — Red Hat Security Advisory: Red Hat build of Quarkus 2.13.9.SP1 release and security update 2026-10-07T03:10:45.551320+00:00

quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used. quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0203 WID-SEC-W-2024-0203 — Red Hat Enterprise Linux Quarkus: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-07T03:10:45.551346+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.